CiviCRM Community Forums (archive)

*

News:

Have a question about CiviCRM?
Get it answered quickly at the new
CiviCRM Stack Exchange Q+A site

This forum was archived on 25 November 2017. Learn more.
How to get involved.
What to do if you think you've found a bug.



  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • New ACL rule breaks existing ACL rules.
Pages: [1]

Author Topic: New ACL rule breaks existing ACL rules.  (Read 372 times)

WORC

  • I’m new here
  • *
  • Posts: 9
  • Karma: 1
  • CiviCRM version: 4.6.9
  • CMS version: Drupal 7.37
  • MySQL version: 5.6.27
  • PHP version: 5
New ACL rule breaks existing ACL rules.
February 18, 2015, 11:38:05 am
TL;DR version: Newest ACL rule causes contacts specified by old rules to disappear even though the groups themselves are still listed.

Example:

User 1 is created and is subject to Drupal's "authenticated user" permission set, I uncheck the ability to view or edit all contacts because I want different users to see different contacts.

Access Control Group is created, access control is checked, and User 1 is added to it.
Group A is created with 100 unique contacts.
Group B is created with 200 unique contacts.
Group C is created with 300 unique contacts.

ACL rule A is created to allow User 1 to view Group A.
User 1 sees Group A on the group listing with 100 contacts.
User 1 clicks on Group A and sees its 100 contacts.

ACL rule B is created to allow User 1 to view Group B.
User 1 sees Group A on the group listing with 100 contacts.
User 1 clicks on Group A and sees no contacts.
User 1 sees Group B on the group listing with 200 contacts.
User 1 clicks on Group B and sees its 200 contacts.

ACL rule C is created to allow User 1 to view Group C.
User 1 sees Group A on the group listing with 100 contacts.
User 1 clicks on Group A and sees no contacts.
User 1 sees Group B on the group listing with 200 contacts.
User 1 clicks on Group B and sees no contacts.
User 1 sees Group C on the group listing with 300 contacts.
User 1 clicks on Group C and sees its 300 contacts.

If ACL rule C is disabled, Group C disappears and Group B's contacts become visible
Subsequently, if ACL Rule B is disabled, Group B disappears and Group A's contacts become visible

Am I misunderstanding how ACLs work? Is this a known issue? A suggested workaround/solution would stop me from going insane. Thanks in advance.

Edit: I have a theory that the id number in the civicrm_group table is a factor. The group with the highest id number seems to prevail (i.e.: the group created last).
« Last Edit: February 18, 2015, 02:06:31 pm by WORC »

Pages: [1]
  • CiviCRM Community Forums (archive) »
  • Old sections (read-only, deprecated) »
  • Support »
  • Using CiviCRM »
  • Post-installation Setup and Configuration (Moderator: Dave Greenberg) »
  • New ACL rule breaks existing ACL rules.

This forum was archived on 2017-11-26.