CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site
This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Using Core CiviCRM Functions (Moderator: Yashodha Chaku) »
  • For Custom Data ACLs, the View and Edit operations currently do the same thing
Pages: [1]

Author Topic: For Custom Data ACLs, the View and Edit operations currently do the same thing  (Read 5569 times)

ailgm

  • I’m new here
  • *
  • Posts: 15
  • Karma: 0
  • Drupal solution provider
  • CiviCRM version: 4.1
  • CMS version: Drupal 7.15
  • MySQL version: 5.0.89
  • PHP version: 5.2.9
For Custom Data ACLs, the View and Edit operations currently do the same thing
September 26, 2011, 07:15:25 pm
Extracted from a mid-2010 topic (http://forum.civicrm.org/index.php/topic,14763.0.html):

Q: Why does the system do in this way:
" NOTE: For Custom Data ACLs, the 'View' and 'Edit' operations currently do the same thing. Either option grants the right to view AND / OR edit custom data fields (in all groups, or in a specific custom data group). Neither option grants access to administration of custom data fields. "

A: Regarding ACLs for View and Edit - this is a "missing feature". You can either help implement (via patch or sponsorship), or potentially implement a buildForm hook to set the custom field(s) to "frozen" in the Activity form based on user role.

For the two options suggested:
1) Patch - Could you give some idea where to start and how hard it would be?
2) Sponsorship - How much would it take?

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: For Custom Data ACLs, the View and Edit operations currently do the same thing
September 26, 2011, 08:15:53 pm

whats your use case where u need separate view and edit permissions for custom fields?

1. i think custom fields are used all over the place (though via just a few functions). So it will be a patch that affects lots of files. Your best bet would to be start with the code at CRM/Core/BAO/{Custom,UF}*

2. if i had to take a random guess, i'd scope this to be a 75-100 hour project

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

ailgm

  • I’m new here
  • *
  • Posts: 15
  • Karma: 0
  • Drupal solution provider
  • CiviCRM version: 4.1
  • CMS version: Drupal 7.15
  • MySQL version: 5.0.89
  • PHP version: 5.2.9
Re: For Custom Data ACLs, the View and Edit operations currently do the same thing
September 27, 2011, 07:29:19 am
Our use case is that some users will be permitted enquiry-only access to look up information on contacts, including all custom data associated with them, while other users will be permitted to update that data.

Donald Lobo

  • Administrator
  • I’m (like) Lobo ;)
  • *****
  • Posts: 15963
  • Karma: 470
    • CiviCRM site
  • CiviCRM version: 4.2+
  • CMS version: Drupal 7, Joomla 2.5+
  • MySQL version: 5.5.x
  • PHP version: 5.4.x
Re: For Custom Data ACLs, the View and Edit operations currently do the same thing
September 27, 2011, 08:53:00 am

i'm pretty sure that if a user has only for "all view contacts" permission, then the edit links are suppressed for all tabs including custom data. So current acl's structure should meet your needs

lobo
A new CiviCRM Q&A resource needs YOUR help to get started. Visit our StackExchange proposed site, sign up and vote on 5 questions

ailgm

  • I’m new here
  • *
  • Posts: 15
  • Karma: 0
  • Drupal solution provider
  • CiviCRM version: 4.1
  • CMS version: Drupal 7.15
  • MySQL version: 5.0.89
  • PHP version: 5.2.9
Re: For Custom Data ACLs, the View and Edit operations currently do the same thing
September 27, 2011, 12:27:44 pm
If so, it would.  Thank you.
Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Using Core CiviCRM Functions (Moderator: Yashodha Chaku) »
  • For Custom Data ACLs, the View and Edit operations currently do the same thing

This forum was archived on 2017-11-26.