CiviCRM Community Forums (archive)

I have a situation where there are about 100 Drupal Users.  We'd like to give User X the ability to view and edit Contact Y in CiviCRM only if the Contact X has a "relationship type 1" with Contact Y. 

I know this could be possible by making 100 smart groups with relationship criteria and 100 ACLs to use those 100 smart groups --- but that is very cumbersome.  We would like to make, for lack of a better term a "global ACL rule" that locks any Contact from seeing another Contact unless the specified relationship type exists.

This rule would be ignored for users with an Administrator role.

Is this possible?  Thanks for your thoughts. 

  

i am guessing this about editing more than the core Contact fields?

@lobo: I have a lot relationships that are not permissioned but I could run a SQL script to change them, that's no problem.   If you could walk me through the workflow please, let me give you the big picture.

once I had the permissioned relationship, I would need to
    * show each user a list of contacts with whom they have a relationship  (drupal view?)
    * allow the users to edit contacts with whom they have a relationship
    * allow users to add activities to the contacts with whom they have a relationship

Furthermore, I would need to give the users the ability to:
    * create new contacts, with whom the permissioned relationship will be established automatically ( i imagine i'd need to have a custom module that uses relationship hooks and post_process hooks on profile submit here)

And restrict users from viewing any details of any contact with whom they do not have a relationship ( this is the medical field, so security is very important)

Could I do all that with a profile?


I'm a little over my head here, so some guidance is VERY appreciated, and I know I may have to punt some of this stuff to webaccess.

    * show each user a list of contacts with whom they have a relationship  (drupal view?)
    * allow the users to edit contacts with whom they have a relationship

The users that they can edit via their permissioned relationship appears in the User Dashboard. Not sure how easy it is to do in Views (its a slightly complex query), but you can potentially use the code from the user dashboard and create the page

q=civicrm/profile/edit?reset=1&gid=ProfileID&id=relatedContactID

will automatically work when the user is logged in for all profiles

    * allow users to add activities to the contacts with whom they have a relationship

This will need to be custom code implemented in a custom module. For the school project (and also the ARMS project), we realized its a lot easier to pre-create the activities and allow people to edit the activities that they are connected to

Furthermore, I would need to give the users the ability to:
    * create new contacts, with whom the permissioned relationship will be established automatically ( i imagine i'd need to have a custom module that uses relationship hooks and post_process hooks on profile submit here)

yes, this is relatively easy and can be implemented in the above module

lobo