CiviCRM Community Forums (archive)

Seeking to construct this use-case...

We shall be using external people to manage certain cases.
We wish to restrict their access to CiviCRM data for anything but the case.

Test...

Test user created in Drupal 7 username TestCase
User assigned to a group 'Case Managers'

Case Managers given 'can access CiviCRM' and 'access my cases and activities'.

After that an administrator creates a case and assigns the case manager role to the test user..

The test user can see the case dashboard but there are no cases listed under 'my cases'  by which I mean a search for 'my cases' reveals nothing.

I've tried assigning various actions to them - nothing pops up at all.

I've also tried assigning the case to them by editing the 'create case activity and either changing the reporter or assigning it.
I've also tried entering them as a client

Nothing enables them to see the case 

Until..

Once I allow them access to view all contacts then they can see the case

But when they click on manage case (remembering that they are the case manager role) they receive the civicrm 'you are not authorised to access this page' notice.

This doesn't seem consistent with the documentation....

The following is a list of the CiviCase-related permissions:

Access my cases and activities: allows a user to create new cases, add activities to the cases they've created and edit those activities. Users with this permission can NOT see cases or activities created by others.
If you need to restrict certain users to ONLY see case data (i.e. hide all other contact information from them), assign "access my cases and activities" permission WITHOUT "edit and view contacts" permission. This permissioning model is useful for users who are external to your organisation and who should not be allowed to see contact details.