Answers.Body: <p>There are a couple of different ways you can go about this.</p>
  
  <ul>
  <li><p>One would be to grant access to CiviCRM, and the bare minimum WordPress access needed to actually get into CiviCRM.  You would remove the "View all CiviCRM contacts" permission from this role (also "Edit all CiviCRM contacts") and then they only have access to contacts based on their ACL.  This method gives the member access to the CiviCRM interface.</p></li>
  <li><p>The second method is conjecture based on a similar technique I've used with Drupal Webform-CiviCRM integration - but I'm guessing you could use a contact reference widget on Caldera Forms CiviCRM to let a (privileged) member pull up and edit existing records.  This is a bit more work, but lets you limit the interface that the member sees to the relevant fields.</p></li>
  </ul>
  
  <p>If you go with the first approach, consider the <a href="https://civicrm.org/extensions/contact-layout-editor" rel="nofollow noreferrer">Contact Layout Editor</a> extension to give the member(s) a more limited view of the CiviCRM interface, so they can't view/edit fields/tabs they ought not to.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-23T21:03:02.357Z
Answers.Text: Thanks - that sounds useful. I will pursue 1 first. I had vaguely considered trying something with Caldera  - when developing the site I used it successfully to create a new member record form. As you say, it might be a useful way of avoiding letting the member see under the bonnet.
Answers.UserDisplayName: Mike Halson
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-25T09:20:36.607Z
Answers.Text: Just to second this approach. We run kids clubs so safeguarding is my big issue. I've created a new WP user type called 'Ambassador' and given it subscriber rights in WP. That way it can log in and see Civi, but has no other WP rights. Then you set up the ACL as Jon suggests. My ambassadors can now see, and update records for young people in their club, but can't see young people from other clubs. A bit fiddly the one time when you set it up, but works really well.
Answers.UserDisplayName: John Bradford
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-23T19:44:00.503Z
Answers.LastActivityDate: 2019-09-23T19:44:00.503Z
Answers.UserDisplayName: Jon G - Megaphone Tech
Answers.Body: <p>Rather than using ACLs, another approach would be to use the ACLs the Permissioned Relationships extension provides - <a href="https://civicrm.org/extensions/relationship-permissions-acls" rel="nofollow noreferrer">https://civicrm.org/extensions/relationship-permissions-acls</a></p>
  
  <p>If when cfreating contacts, you also set up the Relationship, then you can give access to the backend such that the restricted users will only see the Contacts they have a permissioned relationship with.</p>
  
  <p>This can be further extended by allowing second degree permissions. (If the second degree permissions is checked then on admin/misc screen)</p>
  
  <p>May be useful to you</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-09-25T00:45:45.203Z
Answers.LastActivityDate: 2019-09-25T00:45:45.203Z
Answers.UserDisplayName: petednz - fuzion
Body: <p>I've been asked by a client if one of their members can be allowed to create and edit records for prospects (ie people who may or may not go on to become actual members). </p>
  
  <p>The first part - creating a simple data entry form as a profile - was easy to do. I can give the member unique access to a webpage which contains that form. 
  But  what I'm not sure about is record editing. Does the member need to have access to Civi itself? I created a 'Prospect Admin' ACL and assigned it to the member through a Prospect Admin Group. But I'm not sure where we go from here. Is it possible to set it up so the member is able to access and edit prospect records without being able to edit the WordPress site? </p>
  
  <p>Any advice would be welcome!</p>
  
Tags: <wordpress><profile>
Title: How to allow a user to edit certain Civi contact records without seeing others
ThreadText: # How to allow a user to edit certain Civi contact records without seeing others
  
  (Asked by: username_0 on 2019-09-23)
  
  I've been asked by a client if one of their members can be allowed to create and edit records for prospects (ie people who may or may not go on to become actual members).
  
  The first part - creating a simple data entry form as a profile - was easy to do. I can give the member unique access to a webpage which contains that form.
  But what I'm not sure about is record editing. Does the member need to have access to Civi itself? I created a 'Prospect Admin' ACL and assigned it to the member through a Prospect Admin Group. But I'm not sure where we go from here. Is it possible to set it up so the member is able to access and edit prospect records without being able to edit the WordPress site?
  
  Any advice would be welcome!
  
  **Tags:** wordpress, profile
  
  
  ---
  
  ## 2 answers
  
  ### Answer by username_1 on 2019-09-23. Score: 4
  
  There are a couple of different ways you can go about this.
  
  * One would be to grant access to CiviCRM, and the bare minimum WordPress access needed to actually get into CiviCRM. You would remove the "View all CiviCRM contacts" permission from this role (also "Edit all CiviCRM contacts") and then they only have access to contacts based on their ACL. This method gives the member access to the CiviCRM interface.
  * The second method is conjecture based on a similar technique I've used with Drupal Webform-CiviCRM integration - but I'm guessing you could use a contact reference widget on Caldera Forms CiviCRM to let a (privileged) member pull up and edit existing records. This is a bit more work, but lets you limit the interface that the member sees to the relevant fields.
  
  If you go with the first approach, consider the [Contact Layout Editor](https://civicrm.org/extensions/contact-layout-editor) extension to give the member(s) a more limited view of the CiviCRM interface, so they can't view/edit fields/tabs they ought not to.
  
  > **Comments:**
  > **username_0**: Thanks - that sounds useful. I will pursue 1 first. I had vaguely considered trying something with Caldera  - when developing the site I used it successfully to create a new member record form. As you say, it might be a useful way of avoiding letting the member see under the bonnet.  
  > **username_2**: Just to second this approach. We run kids clubs so safeguarding is my big issue. I've created a new WP user type called 'Ambassador' and given it subscriber rights in WP. That way it can log in and see Civi, but has no other WP rights. Then you set up the ACL as Jon suggests. My ambassadors can now see, and update records for young people in their club, but can't see young people from other clubs. A bit fiddly the one time when you set it up, but works really well.  
  
  ---
  
  ### Answer by username_3 on 2019-09-25. Score: 2
  
  Rather than using ACLs, another approach would be to use the ACLs the Permissioned Relationships extension provides - <https://civicrm.org/extensions/relationship-permissions-acls>
  
  If when cfreating contacts, you also set up the Relationship, then you can give access to the backend such that the restricted users will only see the Contacts they have a permissioned relationship with.
  
  This can be further extended by allowing second degree permissions. (If the second degree permissions is checked then on admin/misc screen)
  
  May be useful to you
  
  
  ---
  
  