CiviCRM Community Forums (archive)

ACL's have major problems with performance as far as I can tell... but we have a reasonably easy use-case of them that would seem straightforward, but is it?

WE have many groups, and we want all the registered users on the website to be added to one of these when they register or a civi account is created for them (appears to be at login). This I think we've cracked, at least for registration, using profiles.

However we don't want staff users to see all the site users in the contact database and at the moment this requires us to set a View permission in ACL's for every single group except the "Website Users" group. Is there a point and click way to negate or "Not View" a certain group? If not, is there a reason why this has never been developed? Do we have to use hooks for this?

Thanks,

Adam

also check:

http://svn.civicrm.org/hrd/trunk/drupal/hrd.module

it has the implementation of a negation group (HRD_SECURE_GROUP_ID)

lobo

Not looked into it enough to give you a number. In general trying to write a generic negate is significanly harder than doing it for one specific group in a hook. if u check the ACL hook implementation its fairly easy for a specific use case

I dont think its a trivial addition. If i had to guess between 40-100 hours or so

lobo