CiviCRM Community Forums (archive)

Seems like granting the "view" operation will also give the user access to edit the contacts, not just view.  But this seems to be only when granting for "All Groups" rather than for a specific group.

I'm doing this now on the 3.2 demo sandbox at http://drupal.demo.civicrm.org/.  Some relevant details:
* The user (set up for me by dgg - thanks!) has only "access CiviCRM" permission
* User is in group "view only", and "view only" group has been added to "view only" ACL role
* if "view only" ACL role is added to an ACL with following settings, user can edit all contacts:
   * operation: View,
   * type of data: Group
   * which data: All Groups
* if you change those settings so that type_of_data="Newsletter Subscribers", user can only view, not edit, those contacts

BTW, use case at the moment is to create a user or set of users that can view all contacts and edit none.  Maybe there's a better way to do that?

Thanks,
TM

Patch posted here:
http://issues.civicrm.org/jira/browse/CRM-7061