CiviCRM Community Forums (archive)

I have tried administering this for a week now - working on drupal for a month.  I am getting frustrated and really would appreciate any help. I am having trouble (probably with permissions) allowing the user to do certain things.

What I want to end up with is this functionality:

civi_admin (the role for the people who will manage the site):
- create/edit events with payment processing
- create/edit pages and have them on the front page
- control what is on the front page
- email users/groups and view contact history
- create/edit membership dues payment/renewal

anonymous_user:
- register and pay for events
- start/renew membership and payment

authenticated _user:
- access certain files

I can handle configuring the payment processing.  I need help with knowing how to set permissions for the above to happen.  I thought I had it set properly according all the reading I have done but it's not working out.  The anonymous user now has a civicrm menu item, which he presses and sees menus for managing groups, members, events.  Security prevents the user from doing this but he can still get to the page to make the changes.

I am mainly working on anonymous user right now but here are the drupal permission settings I have:

civi_admin:
all civicrm permissions

anonymous _user:
- node module -> access content
- access CiviMember
- access Contact Dashboard
- access all custom data
- access CiviCRM
- access CiviContribute
- access CiviEvent
- make online contributions
- profile listings and forms
- register for events
- view all activities

authenticated _user:
- node module -> access content

CiviCRM permissions(ACL) are set for everyone to see events.

ANY help is MUCH appreciated!

Thanks.  I'll give this a try.  However, one thing that led me to the question is this quote from the CiviCRM "Manage ACL" page when you add a new ACL:

"IMPORTANT: The Drupal permissions for 'access all custom data' and 'profile listings and forms' override and disable specific ACL settings for custom field groups and profiles respectively. Do not enable those Drupal permissions for a Drupal role if you want to use CiviCRM ACL's to control access."