CiviCRM Community Forums (archive)

Hello, I have a systems issue that needs some new eyes. Here we go...

I have CiviCRM installed on Drupal. I'm using CiviCRM as a Membership database.

I've setup a nice profile that acts as a great searchable membership directory. With mapping too!

People can become members, but the system does not make a Drupal username and password... because the public does not have access to view Profiles (which is required to create a username and password for new users, on a profile) because i don't want them to have access to this nice membership directory.

I have the MD setup to be pulling from a smart group, that are all contacts, with memberships, that are current (this does not restrict access to that smart group, just pulls all people from that smart group to show in the profile search). That smart group is set as 'User and User Admin only'. Thinking that only my logged in users can view their info and other members info on the directory.

When I turn on access for the public to be able to view profiles, they can unfortunately see the directory, which is bad... really bad.

I've tried a work around that tony wrote about, http://forum.civicrm.org/index.php/topic,6129.msg30019.html#msg30019, which seems promising, but I keep getting redirected after logging in. The redirect works great without that code in the PHP file, but once it's entered in, it loops me back to the access denied page, again and again.

Does anyone have any other ideas? on how to give public access to profiles, but be able to limit/restrict the visibility of other profiles to the public, or other roles in general?

ACL's just give a View and Edit option. If I select for the public to have access to profiles, it doesn't matter what ACL's I set, they see everything.

Thank you for any suggestions. It is much appreciated.
bmodesign

Thank you Dave for the info.

I'm hoping on the future release to be able to say which role or membership can view which profile... that would be huge.

Any word on who's developing that side of it? or is there a way to donate to that particular part of the project?

Thanks again,
bmodesign

Since you're on drupal have you considered the approach of having the "membership directory" delivered out by Views - which can restrict access based on roles - not sure if Views exposes the fields/info you need but may be worth a think about??

when we looked into it early on views2 could not do this. I suspect this has not changed. You'll have to give access to your drupal user to the civicrm database

lobo