search

progressivetech / net.ourpowerbase.sumfields

The Summary Fields extension creates read-only custom data fields that extend Contact and are automatically populated with up-to-date totals such as total lifetime contributions, last contribution amount, last attended event, etc.
Other
8 stars 29 forks source link

Enforce permissions #26

Closed Vgratioulet closed 5 years ago

Vgratioulet commented 7 years ago

The summary fields are great, thanks. Will you be working on enforcing permissions ? For example, if a user is not permitted to see the contributions, we would not want him to see the contribution-related summary fields.

jmcclelland commented 7 years ago

Hm - Good point. I do not have any plans to enforce permissions.

I agree it would be a good addition, but honestly, I'm not entirely sure how I would do that in the extension since the data to hide is located in custom fields.

The only method I know of to restrict access to custom fields would be ACLs (https://docs.civicrm.org/user/en/latest/initial-set-up/permissions-and-access-control/#native-civicrm-acls) - but you would have to set those up on a site-by-site basis.

jmcclelland commented 5 years ago

Since this can be done via ACLs (you can restrict access to a set of custom fields) I'm going to close this. I think ACLs is a better way to do it.