Author Topic: Restricting access to custom data with ACL's/Drupal permissions (Read 1519 times)

AaronSmith · August 30, 2012, 03:07:31 am

Hi all,

I'm trying to restrict access to certain custom data field sets for certain users with Civi ACL's. My problem is that when I uncheck the 'CiviCRM: access all custom data' within Drupal permissions for a 'CRM User' role and log in as a 'CRM User', I can still view and edit all the custom fields, which I shouldn't be able to do. I'm therefore not able to use the ACL's I've set up to control access. Is there something obvious I might be doing wrong?

Aaron

Jason W · September 28, 2012, 11:52:31 am

Hello Aaron,

I have a couple of ideas for you.

The first thought that came to mind was that perhaps your 'CRM User' account slipped into the group that you assigned full access to. I have caught myself doing this a few times.

Second, is the Drupal "Edit any Content" permission selected for user?

Lastly, have you considered creating ACLs for each Custom field set? I know there are multiple steps there, but if nothing else works...

Hope this helps.

Cheers!
Jason

AaronSmith · November 16, 2012, 07:18:48 am

Hi Jason,

Thanks very much for your suggestions. I've finally got round to looking at this again today and it turns out it was one of the Drupal permissions causing the problem: the 'administer CiviCRM' permission had been set to true for CRM User. Unticking that box solved the problem.

Best wishes,

Aaron

CiviCRM Community Forums (archive)

News:

Author Topic: Restricting access to custom data with ACL's/Drupal permissions (Read 1519 times)

AaronSmith

Restricting access to custom data with ACL's/Drupal permissions

Jason W

Re: Restricting access to custom data with ACL's/Drupal permissions

AaronSmith

Re: Restricting access to custom data with ACL's/Drupal permissions