Answers.Body: <p>You're correct that the case dashboard permission is a bit hardcoded to just "all" or "my" cases, e.g. <a href="https://github.com/civicrm/civicrm-core/blob/8036d43973a5d42b0722cc45cba3a9f88e9ce182/CRM/Case/BAO/Case.php#L695" rel="nofollow noreferrer">https://github.com/civicrm/civicrm-core/blob/8036d43973a5d42b0722cc45cba3a9f88e9ce182/CRM/Case/BAO/Case.php#L695</a></p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2020-06-11T08:27:53.190Z
Answers.Text: Does it mean its a bug or so? I mean, its skipping the on-board permission concept.
Answers.UserDisplayName: lbl
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2020-06-11T13:02:00.190Z
Answers.Text: You could consider using a drupal view or custom dashboard instead and then you could also better show people what data items they really want.
Answers.UserDisplayName: Demerit
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2020-06-18T13:30:44.390Z
Answers.Text: I second Demerit's comment above, we found the case dashboard not quite fine-tuned enough ( we have LOTS of cases) and turned it off altogether. We went the VIews route with CiviCRMEntity.
Answers.UserDisplayName: RayWright
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2020-06-10T11:59:17.277Z
Answers.LastActivityDate: 2020-06-10T11:59:17.277Z
Answers.UserDisplayName: Demerit
Body: <p>iam using CiviCRM 5.25 and Drupal 7.71. I have a bunch of acls running to limit the access to contacts, so with using CiviCase it controls the limited access for case managers to contacts, or more specific: to clients. therefore related permissions module is also running. Normally the limited access is working fine, even on the search pages (!). </p>
  
  <p>But the CiviCase dashboard <code>civicrm/case?reset=1</code> is not working this way. The CiviCase dashboard show too much cases. As well the overview table as the activites results shows cases the case managers should not see, because the manager is not allowed to see many of this contacts (clients). If i hit a contact name, i get the permission issue and i can't access the contact, this is expected behaviour. </p>
  
  <p>So, the permission on this page is set to "<code>access all cases and activites</code>", which should mean "<strong>... for visible contacts</strong>", but "<strong>for visible contacts</strong>" is not working. Is anyone who can confirm that?</p>
  
Tags: <civicase><permissions><dashboard>
Title: CiviCase dashboard shows cases for invisible contacts
ThreadText: # CiviCase dashboard shows cases for invisible contacts
  
  (Asked by: username_0 on 2020-06-10)
  
  iam using CiviCRM 5.25 and Drupal 7.71. I have a bunch of acls running to limit the access to contacts, so with using CiviCase it controls the limited access for case managers to contacts, or more specific: to clients. therefore related permissions module is also running. Normally the limited access is working fine, even on the search pages (!).
  
  But the CiviCase dashboard `civicrm/case?reset=1` is not working this way. The CiviCase dashboard show too much cases. As well the overview table as the activites results shows cases the case managers should not see, because the manager is not allowed to see many of this contacts (clients). If i hit a contact name, i get the permission issue and i can't access the contact, this is expected behaviour.
  
  So, the permission on this page is set to "`access all cases and activites`", which should mean "**... for visible contacts**", but "**for visible contacts**" is not working. Is anyone who can confirm that?
  
  **Tags:** civicase, permissions, dashboard
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2020-06-10. Score: 0
  
  You're correct that the case dashboard permission is a bit hardcoded to just "all" or "my" cases, e.g. <https://github.com/civicrm/civicrm-core/blob/8036d43973a5d42b0722cc45cba3a9f88e9ce182/CRM/Case/BAO/Case.php#L695>
  
  > **Comments:**
  > **username_0**: Does it mean its a bug or so? I mean, its skipping the on-board permission concept.  
  > **username_1**: You could consider using a drupal view or custom dashboard instead and then you could also better show people what data items they really want.  
  > **username_2**: I second username_1's comment above, we found the case dashboard not quite fine-tuned enough ( we have LOTS of cases) and turned it off altogether. We went the VIews route with CiviCRMEntity.  
  
  ---
  
  