CiviCRM Community Forums (archive)

We are using civi profiles for account creation with Drupal.
In using Drupal,  from the user account page there is a link to "View Contact Dashboard" that links to the Civicrm Dashboard for the user.

On my admin account I also have a link to the "View Contact Record" which provides access through the summary/edit to  more fields than are available  in the Profile fields used for account creation.

Whenever I have looked at the settings to allow "members" to access their contact records, it seems that it opens this up to allowing all "members" to view ALL contact records (which exposes contributions and is not the intention)

Can anyone point me to the right combination of Drupal permissions to allow a user to view/edit just their own contact record?  If not through Drupal is this possible through the Civicrm Access Control?   (this would allow access to Discount codes info that is not available through the Dashboard)


Thanks!
Merlise