Author Topic: ACL rules (Read 1117 times)

number3 · May 14, 2008, 06:39:01 am

I have a Drupal site that allows user to search through a list of organizations (via a custom page I made in Drupal). To allow unauthenticated and authenticated users to search I had to enable the Drupal ACL "view all contacts". However giving users this permission will allow them to search through individual contacts as well; and I'd like to prevent users from searching through individual contacts.

Is there a way to prevent this?

Dave Greenberg · May 14, 2008, 01:47:13 pm

Many folks use CiviCRM's "built-in" Profile functionality to accomplish what you've described. That feature allows you to limit the contacts exposed in a search to those in a particular Group. For your case, you could create a CiviCRM Smart Group based on Contact Type (i.e. find all contacts w/ contact type = Organization). Or you could create a regular (static) group and put the contacts you want folks to find in that group.

You can read about profiles here:
http://wiki.civicrm.org/confluence/display/CRMDOC/Profiles+Admin

If you want to continue to use your "custom page" - you'll need to say more about how it's built in order for us to give you input on limiting the contacts it exposes.

CiviCRM Community Forums (archive)

News:

Author Topic: ACL rules (Read 1117 times)

number3

ACL rules

Dave Greenberg

Re: ACL rules