Multi-org: visibility of site parent group

[davej]

Hi Lobo / Deepak / Others interested in multi-org,

I mentioned on IRC that a non-admin user on Site N sees the Site N parent group in Manage Groups and Search. My feeling was that this isn't necessary, as the site N parent group is the universe in which site N users live, and could cause problems.

• In search, specifying Group: "Site N parent group" is equivalent to specifying Group: any. So it has no purpose here and is potentially confusing. (We field a lot of Civi support calls. You'd be amazed what people get confused by!)
• In Manage Groups, listing "Site N parent group" as a group that anyone with "edit groups" permission can edit and delete is potentially dangerous. A relatively lowly Civi user may have "edit groups" perm but I would say only users with "administer Multiple Organizations" should be able to edit, delete (or preferably even view) site parent groups.

Oliver of GMCVO commented:

"I think you're right; lower users shouldn't even be aware of the fact that they are part of a parent group.
So Rochdale CVS users only see their own groups - makes sense to me."

If it's unproblematic to hide the site parent group from non-multi-org-admin users, that would be the preferred option. Otherwise I think there's a need for the permissioning mentioned above: only users with "administer Multiple Organizations" perm should be able to edit or delete a site parent group.

Hope this isn't a big headache!

Dave J

[davej]

Discussed with Lobo on IRC, filed CRM-4901 at his request.

[cap10morgan]

I totally agree. Hide the parent group.