CiviCRM Community Forums (archive)

Has anyone done any work to use ACL permissions to give fine-grained perspective on cases in CiviCase?

We have a requirement to allow multiple departments to use CiviCRM and specifically the CiviCase module, but there is a view that people working in one department should not be able to view the case entries relating to cases being managed by a different department. In other words, we would like to create an ACL that can have 'view' access to all cases of a specific case type, and restrict viewing those cases to only members of that ACL.

Even better, in fact, would be to still allow the existence of a case to be viewable by other users, and maybe the start and end dates, but not the details of the case (including the case type). So that a user could see that the contact had an ongoing case but not know what the case was about. Could such a masking be possible?

Actually, Yes there is a possibility; however hard-coding from scratch; unfortunately as it is not my code; I don't have permission to show but its customised in:

drupal-dev/sites/all/modules/customfolder/case.module

it contains the case types, roles, mapping of the roles. Then after it was placed like this:

$result = array
(
                            'Housing Support' => array ('Group'),
                            'Adult Referral Day Care' => array ('Group 2'),
                            'Job Seeking' => array ('*')
);
return $result;

The part that I configured is the $result section, this is where I specify what roles can access certain case types, they are not visible to others; however I'm not sure if this helps, I'm stilling learning CiviCRM functionalities and capabilities.