CiviCRM Community Forums (archive)

I am attempting to set up a contact search page that is limited to a specific smart group based on the user.   For instance, one user might have access to the Oakland County contacts and another user might have access to Wayne County contacts.

to create the search page, I created a Profile with the following settings:

Used for: Standalone Form or Directory and Search Views

I created my ACL (with my test user assigned to it) and when setting up options to give it Edit rights on a group of contacts I notice the following:

IMPORTANT: The Drupal permissions for 'access all custom data' and 'profile listings and forms' override and disable specific ACL settings for custom field groups and profiles respectively. Do not enable those Drupal permissions for a Drupal role if you want to use CiviCRM ACL's to control access.

The problem is:

If I disable access to 'profile listings and forms' for my test user and I get an access denied error when trying to access the search page I created.

If I enable 'profile listings and forms' I can access the search page but I have access to every contact in the system.

What am I missing here?