CiviCRM Community Forums (archive)

Hi,

I'm using CiviCRM 1.9 with Drupal 5.3.  In Drupal, when I go in Administer > Access Control, the options profile listings and forms and access all custom data are disabled for all the roles (except admin).

Then, when I log with any user and I go in Find Contacts > Advanced Search, all the existing profiles are listed in the Search Views drop down.  I was expecting to have a list of profiles matching the profile ACLs defined. Is it a bug or the intention is to show the whole list?  Now, since all the users have access to all the profiles for the search view, they can try to perform a search that results in a error page being displayed since they don't have the appropriate access.   

Thanks

Thanks for the quick reply.

I'm using civicrm for an organisation in with a lot of user roles, with different and precise business functions.  That's  why the profile feature is the key in my case.  I have 10 to 15 user roles, with 2 or 3 profiles eached.  The ACL are configured to match those divisions.  So far, everything is almost perfect

The situation I want to avoid, is a user going in advanced search and  has a drop down with 30 options and only 3 usable for his role.

I will file an issue as you suggest. For the patch, I would be glad to contribute to CiviCRM. I'm just starting to be confortable with the application and as soon as possible, I'll go through the development guidelines.  Until Christmas, my main contribution will be with the fr_CA locale translation...