CiviCRM Community Forums (archive)

Hi Erich,

If I'm understanding your concern correctly, then I believe the following should help you achieve what you're trying to do:

To limit users, such as "user1", to the CiviCRM component only:

1. Log in to the Joomla back end as admin.

2. From the top menu, under Users > Groups, add a new group called "CiviCRM Manager" (or however you want to name it) and make this group of parent "Manager".

3. From the top menu, under Users > User Manager, Assign "user1" to the new "CiviCRM Manager" group (and only to the new "CiviCRM Manager" group).

4. From the top menu, select Components > CiviCRM.

5. Once at the "CiviCRM Home" page, from the CiviCRM top menu select Administer > Users and Permissions > Permission (Access Control) and in the opened page, click on the Joomla Access Control link found at the center of the page. This will open the com_civicrm_configuration window.

6. From the com_civicrm_configuration window, expand the "CiviCRM Manager" group you created earlier. Go through all the 68 actions listed and change the "Inherited" values, under the "Select New Setting" column, to "Allowed". Note that, by inheritance, some of the actions are already "Allowed" as indicated under the "Calculated Setting" column. If that's the case, I would personally keep the "Select New Setting" values as "Inherited". I would only change the "Inherited" values to "Allowed" only when the "Calculated Setting" for the listed action is "Not Allowed". Also, if you want to give "user1" access to everything CiviCRM, then I would allow every action, except the very first one (Configure Joomla! ACL). Of course, what I recommended is just my personal preference. If you know what each Action entails then Allow/Not Allow them as you see fit. Once done, apply the "Save & Close" button once done.

Once you're done with all of this, log out of the Joomla back end, and log back in as "user1". While logged in as "user1" you should still see the "Components" menu, yet a very limited version of it: "CiviCRM" should be listed under the "Components" menu; however, you shouldn't see the Extensions Manager.

Note that with this approach, now that you have created the new "CiviCRM Manager" group, in the future you could add as many users ("user2", "user3", etc.) to this group in case you need to have more CiviCRM Managers other than "user1".

I hope this is what you were looking for.

However, I still see the following in the Components menu as the "user1" user:
Banners, Contacts, News Feeds, Search, Smart Search, and Weblinks

I figured out how to disable these for the "user1" user... now the only Component visible to that user is CiviCRM -- which is what I wanted.

and the Help menu is still visible to the "user1" user as well.

Still working on hiding this from the "user1" user...