Extensions Directory

This implements a simple firewall for CiviCRM that blocks by IP address in various scenarios.

Provides an interface to manage user API access keys.

Makes the permission flag on a contact's relationship work as a true ACL.

Adds the ACLS that allow a contact to only see contacts and groups associated with the domain.

Restrict users from viewing/editing contributions and other entities based on permission of financial types.

Provides more logging and alerts around CiviCRM logins.

Allows permissions to be set by user role to add, view, edit and delete Activities. If a logged-in user has a role that provides permission for a specific activity type, then they are authorized to do it for all activities of that type.

Hierarchical ACL - Add ACL based on a Relationships Hierarchical Structure

Allows you to choose a set of groups which will be added to new contacts if the logged in contact is also in that group.

This extension fixes and fills some gaps for Groups (Static and Smart) in CiviCRM, when limited users with dynamic ACL list available groups

Provide single sign-on for CiviCRM using OAuth/OpenID Connect. Either Keycloak or Google are supported out of the box.

This CiviCRM extension modifies the API permissions to allow it to be called with just the "Access AJAX API" permission instead of requiring the more restrictive default permissions. This extension modifies permissions on the following:

- ContributionRecur::getActions
- Contact::getActions
- Membership::getActions
- Membership::get
- Membership::getFields
- Membership::getLinks

Making these changes allows this data to utilized frontend-facing Formbuilder search displays.

Selected activity types are privacy protected, e.g. for "counseling" type activities. Similar to Activity Type ACL, but provides a single, larger set of permissions that applies to all selected private activity types.

Implements CiviCRM orgstructure-based access control functionality for multi-unit hierarchically structured organizations.

This extension provides password expire functionality to CiviCRM standalone.

Once a password is expired the user can still login but has to set a new password after logging in.

With scheduled reminders once can setup e-mails to remind people to set a new password or to inform them that their password is expired.