CiviCRM Community Forums (archive)

Hi,

I thought I had my head firmly wrapped around the ACL concept, but sometimes such thinking has a tendency to fly out the window the moment you try putting it into practice.

Background/intended functionality (Drupal)

The organisation has a members-only area of the website defined through CiviMember Roles Sync. When a membership is in "current" status, the contact's user role is set to "Active". In Drupal, using blocks and a module to control node access, the pages this user may view changes according to their role.

There is a directory of member-only events available to view too, but registration to the individual events must be locked depending on (a) whether they have an active membership and (b) their age. To tackle this I have created a parent ACL group, within which a child smart group checks for contacts meeting that membership status and age. The idea is to then use an ACL (or series of ACLs) to restrict event access to one or more groups of contacts. Perhaps a validate hook could be used on event page load, but I don't have the experience to do this myself, and the organisation is definitely not in a position to replicate this for future events (creating new ACLs might be pushing it too).


My issue

My question is how does the CiviEvents ACL work? The documentation skims over this.

Since there doesn't appear to be a "deny view/edit/etc" operation, I was under the impression that if an ACL were created, all contacts/users who do not fall under the ACL automatically lose the ability to perform that operation. This doesn't work for me (note that I have revoked the Drupal "Register for Events" permission to prevent an override).

Could somebody correct me please?


Many thanks,
Simon

Thanks Lobo.

I agree, with hindsight, the requirements are quite complex. I'm due to discuss the project with Olly Gibson tomorrow; there may be a compromise I could harness which would make administration of this easier for the organisation, in particular. However, it does seem the buildForm hook is the closest and cleanest solution.

Thank you.