Answers.Body: <p>It should be possible in WordPress also. WP + Civi has the same capabilities as drupal and joomla.</p>
  
  <p>Deny ACLs are not part of the UI. You can implement them via a hook. Check:</p>
  
  <p><a href="https://civicrm.org/blog/lobo/implementing-a-custom-acl-system-in-civicrm" rel="nofollow noreferrer">https://civicrm.org/blog/lobo/implementing-a-custom-acl-system-in-civicrm</a></p>
  
  <p>(search for VIP contacts)</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-05-24T08:39:32.423Z
Answers.Text: The link to lobo's blog post is broken.  Anyone have a current link to that?
Answers.UserDisplayName: Aidan
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2015-05-22T14:18:08.707Z
Answers.LastActivityDate: 2017-05-28T19:15:25.220Z
Answers.LastEditDate: 2017-05-28T19:15:25.220Z
Answers.UserDisplayName: Donald Lobo
Answers.Body: <p>Yes, you can deny access for each set of custom field set </p>
  
  <p>just give a read <a href="http://book.civicrm.org/user/current/initial-set-up/permissions-and-access-control/" rel="nofollow">http://book.civicrm.org/user/current/initial-set-up/permissions-and-access-control/</a> which explain. I guess this helps</p>
  
  <p>if you need some example please let me know will update you in details</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2015-05-22T13:51:03.690Z
Answers.Text: Ah, right - looks like this is possible in Drupal and Joomla, but we're on Wordpress. Hadn't realised that - edited question.
Answers.UserDisplayName: Andrew West
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2015-05-22T13:34:34.760Z
Answers.LastActivityDate: 2015-05-22T13:34:34.760Z
Answers.UserDisplayName: Ramesh - ARTECH Consultancy
Body: <p>Has anyone ever tried to deny access to a group of custom fields, for particular roles/users? We have a custom-data tab that we'd like only particular roles to see. I know there's no 'deny' ACL, but I'm wondering if it can be faked through hooks.</p>
  
  <p>I figure I can hide the tab using hook_civicrm_tabs, and kill any exports using 
  hook_civicrm_export. Would there be much more to it than that? Or is this just entirely impractical, as there'll always be some way around it?</p>
  
  <p>I appreciate we could flip it all around and start with a more restrictive set of permissions. Then create ACLs that <em>allow</em> access. But we have a <em>lot</em> of custom fields and a lot of different roles - so this would be a pretty big admin burden. And we only rarely need to deny anything.</p>
  
  <p>EDIT: we're on WordPress, which doesn't have a 'deny' ACL available.</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2015-05-22T12:48:20.440Z
Comments.Text: Is this about deny access to a custom field set?
Comments.UserDisplayName: Jaap Jansma - CiviCooP
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2015-05-22T13:11:35.117Z
Comments.Text: yes, that's about it
Comments.UserDisplayName: Andrew West
Tags: <custom-fields><permissions><acl>
Title: How to fake a 'deny' ACL
ThreadText: # How to fake a 'deny' ACL
  
  (Asked by: username_0 on 2015-05-22)
  
  Has anyone ever tried to deny access to a group of custom fields, for particular roles/users? We have a custom-data tab that we'd like only particular roles to see. I know there's no 'deny' ACL, but I'm wondering if it can be faked through hooks.
  
  I figure I can hide the tab using hook\_civicrm\_tabs, and kill any exports using
  hook\_civicrm\_export. Would there be much more to it than that? Or is this just entirely impractical, as there'll always be some way around it?
  
  I appreciate we could flip it all around and start with a more restrictive set of permissions. Then create ACLs that *allow* access. But we have a *lot* of custom fields and a lot of different roles - so this would be a pretty big admin burden. And we only rarely need to deny anything.
  
  EDIT: we're on WordPress, which doesn't have a 'deny' ACL available.
  
  **Tags:** custom-fields, permissions, acl
  
  > **Comments:**
  > **username_1**: Is this about deny access to a custom field set?  
  > **username_0**: yes, that's about it  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_2 on 2015-05-22. Score: 3 | Accepted answer
  
  It should be possible in WordPress also. WP + Civi has the same capabilities as drupal and joomla.
  
  Deny ACLs are not part of the UI. You can implement them via a hook. Check:
  
  <https://civicrm.org/blog/username_2/implementing-a-custom-acl-system-in-civicrm>
  
  (search for VIP contacts)
  
  > **Comments:**
  > **username_3**: The link to username_2's blog post is broken.  Anyone have a current link to that?  
  
  ---
  
  ### Answer by username_4 on 2015-05-22. Score: 1
  
  Yes, you can deny access for each set of custom field set
  
  just give a read <http://book.civicrm.org/user/current/initial-set-up/permissions-and-access-control/> which explain. I guess this helps
  
  if you need some example please let me know will update you in details
  
  > **Comments:**
  > **username_0**: Ah, right - looks like this is possible in Drupal and Joomla, but we're on Wordpress. Hadn't realised that - edited question.  
  
  ---
  
  