CiviCRM Community Forums (archive)

I have created a Drupal role for a user called Editor.
The user has only these permissions in Drupal: 1) CiviCRM: add contacts, 2) CiviCRM: view all contacts, and 3) CiviCRM: access CiviCRM.

I have also created a CiviCRM ACL role and the user has the edit role for a group of contacts. (this user also belong to an Access control group in CiviCRM called Editor).

Problem
If this user(Editor) uses the search function to search for contacts he can actually see all contacts but he can only edit the contacts in the group he has access to, which is what i want.

In addition to that, the user has all other options available on the action menu LIKE 'Add contacts to Group', 'Export contacts' etc.

How can I  restrict access to some of these actions?

Am i missing something? Please advise. thanks