CiviCRM Community Forums (archive)

I am working on an upgrading a customized CiviCRM 2.0.4 (Drupal) to 2.2. One customization made was to restrict view/edit access to certain Activity types to users lacking a certain Drupal permission.

Am I correct that there is no way to do this in CiviCRM, aside from editing the core code?

Thanks.

Thanks.

I will admit that I don't even recall what site that was for, back in 2009. But as luck would have it, I did the same for a D7 site this year.

I put

/// customized by Hershel Robinson
// Hide certain activities for all except admins and staff
  global $user;
  if (!in_array('staff',$user->roles) && !in_array('administrator',$user->roles)) {
    unset($otherTypes[35]);
    unset($otherTypes[36]);
    unset($otherTypes[37]);
    unset($otherTypes[38]);
    unset($otherTypes[39]);
    unset($otherTypes[40]);
    unset($otherTypes[41]);
  }
/// END customized by Hershel Robinson

in line 72 of CRM/Activity/Form/ActivityLinks.php

and

/// customized by Hershel Robinson
// Hide certain activities for all except admins and staff
  global $user;
  $skip = 0;
  if (!in_array('staff',$user->roles) && !in_array('administrator',$user->roles)) {
    if (in_array($dao->activity_type_id,array(35,36,37,38,39,40,41))) {
      $skip = 1;
    }
  }
  if (!$skip) {
/// END customized by Hershel Robinson
in line 799 and then

/// customized by Hershel Robinson
  }
/// END customized by Hershel Robinson
in line 845 of CRM/Activity/BAO/Activity.php

Your line numbers may differ by a few, but that's the basic idea. Not the prettiest solution, but since this list only does need to appear in these two places, I was satisfied to do it this way.

Would be better to store the array in a function or a variable of course.

We're right now discussing solutions for a client who wants something similar, and I'm wondering if there may be some friendly overlap.

This client wants permissioning per Activity, rather than per Activity Type.  We're thinking of ways we could limit access to specific activities based on Group membership, and will probably post those here soon for feedback.

I'm leaning toward extending ACLs to Activities.  As Lobo points out (here: http://forum.civicrm.org/index.php?topic=10347.0), there are some significant challenges when it comes to implementing ACLs for specific Activities.  But I think it would be easier to implement them for Activity Types.  That doesn't solve our client's problem entirely, but there may be some helpful overlap.

- Allen