CiviCRM Community Forums (archive)

Hi,

We have 2 main parent groups of contacts in our CiviCRM installation: HNIs and Non-HNIs. Each of these parent groups have different child groups. Only Admin users must be able to access HNI contacts. The other 'General users' should have access only to non-HNI contacts.

We have tried to achieve this in the following manner:
1. We have a CiviCRM group of Admin users (who have the access to login to Joomla backend and they have permissions to add and delete civicrm contacts).
2. By Joomla ACL we have given the "view and edit all contacts" permission only to Admin. General users do not have "view and edit all contacts" permission.
3. Next we have created a smart group of all non-HNI contacts. Any new contact gets added to this smart group unless added specifically to the HNI group.
4. The General users are given edit access to this Smart Group by an ACL rule.

So far, if a General user searches for contacts in the HNI group he is not able to see any of the HNI contacts.

However, some HNI contacts were also added to non-HNI lists (such as newsletter lists). Now since they are part of both groups, they are becoming visible to the General user.

Is there a way to ensure that the restriction (general users cant access HNIs) supercedes the permission (general users can access non-HNIs)?

Thanx for your reply Lobo...
I will explore this option and get back to you if I get stuck somewhere.

Satyam