Question

Photo of Matthew Meekins

0

Small Group Leaders Can't Add Members via Toolbox

2

I've run into a problem where small group leaders are unable to add people to their group in the Group Toolbox. This is because when they get to the add person page, they aren't allowed to search for people. Where do I change permissions for that secruity role so that they can search for people?

  • Photo of Jon Edmiston

    0

    You will need to adjust the security on the api/People/Search REST endpoint. You can find this under 'Admin Tools > Security > REST Controllers > People'. Let me know if this solves it for you and I'll update the Groups guide to help others.

    • Trey Hendon III

      Trey Hendon III

      Hey Jon,


      Adding All Auth users to the People endpoint allows the search to work. I guess we should setup a security group specifically for leaders if we want them to do this?


      I'll note that I don't like enabling this for folks because I also found that I could open the details of an existing Group Member, then search for someone else and "replace" the existing member.

      • Jon Edmiston

        Jon Edmiston

        Yes you should probably create a group to security this. In v4.0 there is a new feature that allows you to sync a group (aka security role) to the contents of a Data View.


        In terms of security... that will always be up to the church to determine who they want to be able to 'search' the database. It will always be a balance of 'power' vs discover ability. If a church is hesitant to allow searching (as we are at CCV) then a workflow or email form will be the next best thing.

      • Photo of Trey Hendon III

        0

        Not sure about the security, but I'm actually working on a Workflow entry form (copy of the Contact Us) that would not auto-create a record or expose the database to the Group Leader.  It will notify a staff person and let them search the database and create a record if necessary.  I was actually looking for a simple Email Form type block, but don't see one - so the workflow will be a bit overkill, but should meet the need.