CiviCRM Community Forums (archive)

I'm working with an external company that will need to access a part of my contact database (but not all). In a development environment, they already have a user and it's correspondent API key.

That's what I've done

• They don't need to access the entire contact database, so their Drupal role has both "CiviCRM: view all contacts" and "CiviCRM: edit all contacts" disabled.
• I've specified the groups of contacts they can access via ACL's.

Now, if I login with their user, I can only see the correspondent part of the database. If I perform a "global search", I only obtain the contacts they should have permission to see. Everything ok, until here.

The problem
If I go to the API explorer, when I'm logged in with their user, and I ask for all the contacts (Contact / get), I obtain only the contacts of the groups that I'm supposed to see.
But if I make the same call via REST (/sites/all/modules/civicrm/extern/rest.php) I can't see any contact.

{
   "is_error":0,
   "version":3,
   "count":0,
   "values":[]
}

Shouldn't I obtain the same result set? Any idea?

Are you using 4.1? you should upgrade, got a fair bit of code fixing since then

No, no! Sorry, I've to update my profile information. I'm using 4.3.5.