CiviCRM Community Forums (archive)

We have a person designated to enter the offline contributions like checks and cash into CiviCRM. However we don't want him to have full access to CiviCRM components.
We want him to have only these permissions:
1. Search/Update/Add a contact
2. Add a contribution record for a contact record. ( Should not access contact dashboard, previous contributions etc)
    a. Cannot view the contributions he manually entered. If he enters bad data, the admin (has all permissions) will look into it
3. Add a contribution record (contribution made offline by cash or check) to an existing pledge on a contact record

We are uising CiviCRM 4.1 and Drupal 7
We were able to achieve #1 with Drupal permissions but are having trouble with #2.
How can we allow a user role to have permission to only add a contribution record to a contact but not view any contributions for a contact.

As no one has replied to this, do I have to assume no one has had such scenario?

Seems like it.

Or am I asking too much?

Well your requirements are unusual and non-standard. You want someone to be able to enter data into a "black box" and then not be able to see what he entered.

You could achieve this by writing a custom Drupal module. I think that would be your best bet.

Might want to also check here:

http://forum.civicrm.org/index.php/topic,27828.msg118716.html#msg118716

since this is currently missing, might be good if you can join forces with sibro and figure out what needs to be done, how it will be done and design, implement and contribute the code back to the project. We can help out on irc as needed. Might also want to check the irc logs:

http://irc.civicrm.org/logs/%23civicrm.log.2013-02-25.txt. some excerpts from there:

[19:31] <dgg> ok
[19:31] <sibro> Lobo:  I posted about access to contributions.  I have a number of items I need to enhance in security so I might as well start on something simple. Can you outline what needs to be done.
[19:36] <dlobo> sibro: i think the first thing to do would be to:
[19:36] <dlobo> a. take a look at existing permissions
[19:36] <dlobo> b. take a look at some new workflows
[19:37] <dlobo> c. figure out what new permissions need to be added and how they integrate with item a.
[19:37] <dlobo> d. come back to the forums with a proposal for the changes needed
[19:38] <dlobo> should not take took long, maybe 1-3 hours. seems like, folks need a way to create / edit / view the contributions they enter

Dont think this is asking too much either

lobo

I do think we need permissions like: "create new contributions", "edit my created contributions", "view my created contributions", "search my created contributions"

in general giving a black box: "enter data here and press submit w/o being able to review/edit/fix data you entered does not seem a great workflow, IMO

lobo