CiviCRM Community Forums (archive)

Here's a problem that I've been able to duplicate on the sandbox.

My assumption is that if "Allow individuals to contribute and / or signup for membership on behalf of an organization?" is enabled then when an individual is viewing the "Member Signup and Renewal" Form with "I am contributing on behalf of an organization." selected that the "Organization Details" box should show both: "Create new organization" and "Select existing organization".

However, for most "individuals" (and I can't determine any commonality) only the "Organization Name" box appears.

What am I missing??

Hi Dave,

I understand the logic; and it makes perfect sense, but in the sandbox, the individual was an authenticated user and did have an employee<->employer relationship - yet the auto-complete selector didn't appear.

Hi Dave,

bummer...now I need to rethink my workflow...again.

I had hoped that any employee of a company (established relationship) would be able to use the contribution pages with the auto-complete selector box enabled. Many employees may be contributing on behalf of an employer (rentals, memberships...) but I don't want any employee to be able to edit the CiviCRM organization record. I also found out that turning off permission to "Access Contact Dashboard" disables the functionality of the auto-complete selector on the contribution pages (the box appears, but doesn't work).

We're pushing the use of CiviCRM in a bit different direction that the original design, so our needs are a bit unique, but if we can work through some of the issues, we'll be able to open up a large market (trade associations, chambers, similar types of *organizational* focused orgs). We'll keep at it...we're too far down the road to give up now ;-)

Too bad you're way out on the left coast, it would be great if we could get you to Maine (the 'right' coast) to talk to our Drupal Users Group (about CiviCRM) and spend the day with us to learn about what we're trying to do...

Kudos to you and your team for actively responding to all things CiviCRM!

Thanks Dave!

Hi Dave,

I'm still not comfortable with doing any hacks yet, so I'm trying to work within the existing framework. By following your suggestion to set up an employee as permissioned I ran into the following items - which seem to be a security issue for organizations. In order to enable the auto-complete functionality within CiviContribute an authenticated permissioned-employee user ends up with the following capabilities from CiviCRM:
>>can edit employer data
>>access activities history and create new activities
>>view and open cases
>>view, edit, disable and delete own relationships
>>view and add notes
>>edit tags
>>view the change log
>>send email from within CiviCRM to any email address (which also changes the primary email address for the contact)
>>can schedule a meeting and view all database contacts
>>can delete themselves or the employer

Is there a security setting I'm missing? Here are the access permissions that are turned on in the CiviCRM module are:
>>access CiviCRM
>>access CiviMail subscribe/unsubscribe pages
>>access all custom data
>>make online contributions
>>profile listings and forms
>>register for events
>>view event info

Yikes!

Hi Dave,

Fast response as always!

Two permissions-related bugs. This authenticated user functionality needs to work when 'access CiviCRM" is FALSE:

1. The dojo comboBox for "Select existing organization" does not retrieve valid permissioned relationships for an authenticated user if "access CiviCRM" is FALSE.

I like #1 - this will resolve the issue, and I'll be able to turn off user access to CiviCRM

2. The "Edit Contact Information" form returns "Access Denied" when authenticated user links to it from the Contact Dashboard if "access CiviCRM" is FALSE (this form should be available in this condition). ( civicrm/contact/relatedcontact?action=update&reset=1&cid=1 )

I'm not sure I agree with #2. When I turn off access to CiviCRM, I don't want the individual to be able to edit any data on the Civi Contact Record Page, and don't want access to be available from the Contact Dashboard - I've created profile pages for that purpose. If you're going to allow folks to edit from the Contact Dashboard, please give the option to turn that link off in the Global Settings. I really like the options at Settings-Site Preferences-Contact Dashboard and can envision a time when the selections are built upon other modules and permissions can be granted by role.

Thanks Dave!

Thanks Dave!

From my testing, I only get this when I give AuthUser 'access civiCRM' which obviously gives too much access.