CiviCRM Community Forums (archive)

Hi Folks,

I'm trying to find a balance in the civicrm events permissions, and feel like i might not understand how the acls integrate with the 'inherited' cms permissions (drupal 6.3, civicrm 2.1b4)

I would like to have two types of users:

facilitator - CiviCRM user that can fully create and manage events and event participants.

host - CiviCRM user that can add and remove participants from a single event.

It seems like i need to give the 'host' account both 'access CiviEvent' and 'edit all contacts' permission to allow them to register a single contact to a single event, but then that gives them a reasonable amount of power to see and modify other events, participants, etc.

Given that this data was imported from a board of election database, i don't mind giving the 'host' edit contact permission, because the information may not be accurate, and we may be able to ask them to update with phone number, email,etc.  However, i would prefer not to give them full access to the CiviEvent module.

Any suggestions?

What would be nice is the ability to create a 'meta role binding', where we could create 'edit event' and 'view event' roles, but give them based on event role.  So, for example, i could give 'view' access to an event if the user is an Attendee, but 'edit' access if they are a 'Host'.  Would this be difficult with the current security infrastructure within civicrm?