CiviCRM Community Forums (archive)

Hi,

I understood how to use ACL to allow some users to access specific groups, I'm wondering if it's possible to do it the other way around:

Every user has access to any contact in any group, but only the "super admin" ones can modify the contacts in a specific group (or add new contacts to this group).

Use case:
got an elected "executive committee" group, I don't want anyone to be able to mess with their contact details, add new persons, remove some....

Any idea ?

X+

we have a potential consulting project that will fund the development of "deny" operation  on ACL's. This will allow you to do the following:

a. Grant Role A "Allow" "Edit Contact" permission to access all contact
b. Grant Role A "Deny"  "Edit Contact" permission to all contacts in Group Board Members
c. Grant Role A "Allow" "View Contact" permission to all contacts in Group Board Members

If and when the consulting project is finalized, we'll put the specs on the wiki and announce for community input.

Pete: granularity for ACL's for different aspects of contact info, will be addressed once we fix a few of the major acl issues

lobo