CiviCRM Community Forums (archive)

I am running CiviCRM integrated into Drupal.    My organization has many administrators that require access to CiviCRM in order to create events and other postings.

The problem is that some of these people only need the ability to view current events, participants and other data in CiviCRM.  We don't want to give them full access to delete, modify or create new content. 

I cannot find a way through Drupal / Civi permissions to limit a role to only view access.  It seems that you can restrict the ability to delete content and in some cases to edit participants of events.   I cannot figure out a way to completely prevent someone from creating new events or modifying an existing event.

Any ideas?

Thanks

Hello mcgeehon,

ACLs might help with this issue. For example, set it up like this :

Create 2 groups:
Admin View only - contains the Admin that are being restricted to view only.

Admin - can perform all Event Operations.

In CiviCRM, go to Administer-->Users and Permissions-->Permissions(ACLs)
       a) Manage Roles- Create 2 roles: "Admin-view only" and "Admin"
       b) Assign Users to Roles- Assign the "Admin-view only" Group to the "Admin-view only" Role, likewise for Admin
       c) Manage ACLs-->Add an ACL - Description is whatever you like, Role=Admin, Operation=view, type of data=events, Event= the event that you want to restrict access to. Repeat for Admin, except operation= All.

NOTE: For Event ACLs, the 'View' operation allows access to the event information screen. "Edit" allows users to register for the event if online registration is enabled.
Please remember that Drupal's "register for events" permission overrides CiviCRM's control over event information access.

Cheers!
Jason