CiviCRM permissions vs ACLs

Here's another reason permissions are difficult in CiviCRM:

It's hard at first to understand the difference between permissions and ACLs:

The simplest explanation I've found is this:

• Permissions allow or deny access to certain functionality.

• ACLS allow or deny access to certain groups of data.

Want to limit which users can register for online events or access the features for managing contributions? Adjust the permissions.

Want to limit which users can view a specific custom data group or edit contacts who are in a specific contact group? Adjust the ACLs.

The documentation for permissions and ACLs may help.

But if you get stuck, you can always shoot me an email and I'll be glad to help.

All the best,
A.