Answers.Body: <p>I guess <a href="https://github.com/JMAConsulting/biz.jmaconsulting.activitytypeacl" rel="noreferrer">Activity type ACL</a> extension will do your job. This extension provides additional permission for each activity type. By default its set to false for all activity type.</p>
  
  <p>HTH</p>
  
  <p>Pradeep</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-06-28T18:24:38.070Z
Answers.Text: Thank you.  That worked.
Answers.UserDisplayName: richardsplayground
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2019-06-26T18:34:55.590Z
Answers.LastActivityDate: 2019-06-26T18:34:55.590Z
Answers.UserDisplayName: Pradeep Nayak
Body: <p>I'm a bit stumped on permissions.  I'm trying to create a user role that can </p>
  
  <ul>
  <li>See and edit any user</li>
  <li>See and edit custom fields for the user</li>
  <li>NOT see or edit activities for any user</li>
  <li>NOT see any financial information for any user</li>
  </ul>
  
  <p>I tried this combination of settings:</p>
  
  <ul>
  <li>CiviCRM: view all contacts : CHECKED</li>
  <li>CiviCRM: view all activities : NOT CHECKED </li>
  <li>CiviCRM: Delete activities : NOT CHECKED</li>
  <li>CiviCRM: access CiviCRM backend and API : CHECKED</li>
  <li>CiviCRM: access Contact Dashboard : CHECKED</li>
  </ul>
  
  <p>This arrangement seems to allow the user to see all contacts but also all activities on all contacts.</p>
  
  <p>If I remove "CiviCRM: view all contacts" then the user can see no contacts at all, and no activities.</p>
  
  <p>I don't really understand why "view all contacts" gives access to see activities when the activity permissions are turned off.  That seems counterintuitive.</p>
  
  <p>And I can't find a combination of permissions that allows a user to see/edit all users, but not see/edit any activities.</p>
  
  <p>Suggestions?</p>
  
  <p>(CiviCRM 5.8.2 on Drupal 7.  I'm aware a security update is needed to CiviCRM.)</p>
  
Tags: <permissions>
Title: View contacts but not activities
ThreadText: # View contacts but not activities
  
  (Asked by: username_0 on 2019-06-26)
  
  I'm a bit stumped on permissions. I'm trying to create a user role that can
  
  * See and edit any user
  * See and edit custom fields for the user
  * NOT see or edit activities for any user
  * NOT see any financial information for any user
  
  I tried this combination of settings:
  
  * CiviCRM: view all contacts : CHECKED
  * CiviCRM: view all activities : NOT CHECKED
  * CiviCRM: Delete activities : NOT CHECKED
  * CiviCRM: access CiviCRM backend and API : CHECKED
  * CiviCRM: access Contact Dashboard : CHECKED
  
  This arrangement seems to allow the user to see all contacts but also all activities on all contacts.
  
  If I remove "CiviCRM: view all contacts" then the user can see no contacts at all, and no activities.
  
  I don't really understand why "view all contacts" gives access to see activities when the activity permissions are turned off. That seems counterintuitive.
  
  And I can't find a combination of permissions that allows a user to see/edit all users, but not see/edit any activities.
  
  Suggestions?
  
  (CiviCRM 5.8.2 on Drupal 7. I'm aware a security update is needed to CiviCRM.)
  
  **Tags:** permissions
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_1 on 2019-06-26. Score: 4 | Accepted answer
  
  I guess [Activity type ACL](https://github.com/JMAConsulting/biz.jmaconsulting.activitytypeacl) extension will do your job. This extension provides additional permission for each activity type. By default its set to false for all activity type.
  
  HTH
  
  Pradeep
  
  > **Comments:**
  > **username_0**: Thank you.  That worked.  
  
  ---
  
  