Hello,
I write to the forum for help .. because I can not change the permissions of a user in VM 2.0.20b with Joomla 2.5.11.
I would like to create a user that in addition to me (administrator of the site) is able to manage the store. Here are the steps I did:
1) created a user group "xxx" in Joomla under the group "administrator"
2) changes the permissions to do so only access Joomla VM
3) create a user whose permissions are groups of "xxx"
4) At this point the user is properly configured VM as storeadmin and accesses the back end correctly
So far so good, but unfortunately, when this user logs in to the front end and provides billing information during purchase (for testing, considering that administers the store) to change its permissions to storeadmn shopper.
From the back end can I change them?
I read that I would click on the user name and, in additional info, change the permissions but ... I do not know if anything has changed because the permissions are displayed but are not editable! I thought it was the browser ... but I tried with both IE and Chrome ..
I repeat, it will be a trivial ... but ... help!
Thanks to everyone
Max
[attachment cleanup by admin]
Can you tell me if it behaves well to you?
Thank you very much
Max
same problem, did you find any solution?
thanks
[Edit by Max Milbers aka Milbo: Different people managing the store have NOTHING todo with multivendor. Multivendor means that there are more than one vendor. IF you want just more than one person administrating the store go here http://forum.virtuemart.net/index.php?topic=116217.msg402166#msg402166]
You add another vendor from the backend. The new vendor/storeadmin should be registered in Joomla (add through Joomla's User Manager) and set to Administrator status.
1. in Config/Shop set Enable Multivendor (experimental only for developers) to administrated multivendor
2. Go to Orders & Shoppers/Shoppers. You will see a column labelled Vendor? - enable your new admin as vendor. Now there should be two ticked entries in that column.
3. Now on the came page select that username for editing. There you can enter the Vendor store details (will be same as the superuser-vendor) and Shopper Information tab should be the same as the superuser-vendor.
Then the new admin can log in and manage the store.
You can use Joomla's ACL if you want to make restrictions on what the new admin can edit.
Thanks for Help!!
Thank you and sorry for the delay (I was on vacation!).
I'll try some tests.
Thank you again!
I followed the instructions above provided by @jenkinhill but when I go to assign the vendor in the users Shopper Information and hit save, the vendor info does not get saved and instead reverts back to a default dialog dropdown. I too am looking for a solution on a single vendor site where i need multiple users to be able to log in but not have to have super user rights to see all the orders/products. any other suggestions?
Hi datagroove,
unfortunately there is not much hope for now. To me the point of jenkinhill 3 does not work.
Alternatively, I created a group "son" of the group administrator (eg adminx) in Joomla and I have allowed access to only a few sections of Joomla (with permissions, you know how?). By placing the user (eg, Usery) in this group will become storeadmin in Virtuemart.
You have v2.0.22b? If so, you have seen that have been incorporated permits, but there are some problems such as the inability to give permission to the menu "orders & customers" (I do not have answers yet to see if it is an error or if it is desired, but how could administer the store without seeing orders ..??). However, you can overcome the problem by allowing the group adminx to "Configuration" (button permits, permissions tab, configuration item). In this way will see all the menus but unfortunately .. here's the real problem: can not see orders (empty page) and can not update the clients (eg, associating them with a group) ....
I do not know if the 22c improve these aspects, I'll try and possibly reopen a post.
If anyone has other info .. him we would be grateful!
Max
I am working with 2.0.22.c (joomla 2.5.13) and i have tried to do what MaxMi said (use the configuration tab) and still doesn't work.
I am just one vendor but need to have several admins.
I was working with multivendor enabled, had three users/admins activated as vendors.
But with the upgrade t0 2.0.22.c one of them has lost the ability to administer the backend.
I went eith the ACL and gave him all the privileges needed. He was able to do everything except admin the orders.
I compared each tab of the two admins (they were not superadmins) and they seemd identical; one of them could edit orders and the other one couldn't.
Now i have left only one vendor and disabled the multivendor feature.
The problem remains.
Created, in joomla, another user, promoted him to admin, did what is being recomended by jenkinhill; still no result.
Any idea to solve this?
Quote from: jenkinhill on June 20, 2013, 13:24:33 PM
You add another vendor from the backend. The new vendor/storeadmin should be registered in Joomla (add through Joomla's User Manager) and set to Administrator status.
1. in Config/Shop set Enable Multivendor (experimental only for developers) to administrated multivendor
2. Go to Orders & Shoppers/Shoppers. You will see a column labelled Vendor? - enable your new admin as vendor. Now there should be two ticked entries in that column.
3. Now on the came page select that username for editing. There you can enter the Vendor store details (will be same as the superuser-vendor) and Shopper Information tab should be the same as the superuser-vendor.
Then the new admin can log in and manage the store.
You can use Joomla's ACL if you want to make restrictions on what the new admin can edit.
This is correct. But I think they dont want new vendors, they want more than one login able to administrate the store or only parts of it, without access to the rest of joomla BE. To achieve this, the easiest way is to
1. Create a new joomla permission group.
2. Go in Virtuemart.
3. Open some list. Go to the new configuration setting in the upper right corner "Permissions"
4. Configure it in joomla style, done.
Hello
At the moment , we still have the VM permissions implemented.
and it is done that way:
1) create a user in Joomla and set it to the correct joomla group
If this user is a super admin user, he will have the VM permissions admin
If the user is an administrator , he will have the VM permissions storeadmin
2) go in the VM administration, and enter the BT address: the user will keep the VM storeadmin rigths
If the BT address is given from the frontend, then the VM permission are changed to shopper.
I think we should remove the VM permissions, since we have the ACL now
QuoteFrom the back end can I change them?
At the moment, only directly in the table xx_virtuemart_vmusers, change the perms to "storeadmin"
Hi Milbo
Your Joomla style solution works, except that on the permissions menu tab 'Orders and Shoppers' the permissions to set are for the VM menu 'Shop' i.e. Shop, Media Files, Shipment and Payment methods; not with managing the orders or the shoppers - on the VM Menu 'Orders and Shoppers': Orders, Revenue Report, Shoppers, Shopper Groups and Coupons, which is the area of most concern for the storeadmin.
Not sure if I'm missing something, but I think there is a tab missing / mislabeled in that 'Permissions' configuration setting?
Im running in this same problem....
I need to give to the "user" some webmaster rights to manage the shop, edit pages or add blog posts, with little limitations (permissions set, to for example, not allow migration or payment methods, so they dont screw up things, the same for joomla, I just give access to blog and some other functions, but not full super admin).
So... I created the group under SuperAdmin then in Global/Permissions, they have ALL exept Super Admin. I created a "webmaster" user under this group, with all permissions EXEPT superadmin. I allow to see admin interface, but I deny some modules, etc. using the joomla "options", so not allow them to see everything in the joomla config .... until here, everything okey.
Then, from VirtueMart as "admin", from the Permissions, I disallow access to some functions for the "webmaster" group.
Now, I login with that "webmaster" user to VirtueMart... and everything shows okey... EXEPT, that I cant view the ORDERS/BUYERS, I see the menu item, but empty list, no links on it.
Well... then I go back to admin, and change store owner, to the "webmaster" user id. ( setStoreOwner VmUser updated new main vendor has user id ## wich is webmaster id)
Still the same...
Well... then I enable multivendor... go to buyers, and I see the one in green, is webmaster (Because owns the shop)... but still cant see the orders.
So... I put "admin" back as the shop owner... go to buyes, and enable "vendor" for "webmaster" user. (it shown off). wich shows as "storeadmin" usergroup.
So im lost... it also cant see the "edtishop" link... say it have no permissions. (ie. Pencil icon on the control panel).
Is there anything Im missing?
Quote from: Alison Effting on September 13, 2013, 16:08:48 PM
.. on the permissions menu tab 'Orders and Shoppers' the permissions to set are for the VM menu 'Shop' i.e. Shop, Media Files, Shipment and Payment methods; not with managing the orders or the shoppers - on the VM Menu 'Orders and Shoppers': Orders, Revenue Report, Shoppers, Shopper Groups and Coupons, which is the area of most concern for the storeadmin.
Not sure if I'm missing something, but I think there is a tab missing / mislabeled in that 'Permissions' configuration setting?
:( any news about this issue? I'm trying the last revision 2.0.22d and have the same problem.
Has anyone a workaround to allow access to the Orders area without giving all admin permissions?
Thanks in advance
Luca
:( any news about this issueHi,
I have the same problem.
Has anyone a workaround to allow access to the Orders area without giving all admin permissions?
Thanks in advance
I saw joomla user administrators in 2.024b can enter clients and orders when settings the ACL correct. Only when clicking orders, no orders are shown...
For listing orders and its details VM is currently checking the permission "admin". Unfortunately "admin" is only user with superadmin rights.
Seems, that the permission for displaying orders (which is possible to set in permissions of VM) is not calculated at all (why it is possible to set it then?)
Dirty hack for this is to change file /administrator/components/com_virtuemart/models/orders.php and replace all occurance of
Permissions::getInstance()->check("admin")
to
Permissions::getInstance()->check("storeadmin")
It should be there twic, once at line 152 and second at line 244 (for VM 2.0.26d).
Pls developers check, admin cant view orders even when permissions have been assigned for it.
VM 2.026D
Hello everyone
I am facing the exact same issue. I want other people to manage the orders only within the shop but not the other areas.
I managed to set up everything and only orders tab is being enabled. However no orders are listed.
As soon as I change the user to super user all the orders are listed.
Is there a setting to allow the listing of orders as well as the updating of status.
Regards
Cedric
ACL works correctly in the next version, which is close to release. Test with 2.5.2
Quote from: Milbo on September 09, 2013, 11:32:17 AM
This is correct. But I think they dont want new vendors, they want more than one login able to administrate the store or only parts of it, without access to the rest of joomla BE. To achieve this, the easiest way is to
1. Create a new joomla permission group.
2. Go in Virtuemart.
3. Open some list. Go to the new configuration setting in the upper right corner "Permissions"
4. Configure it in joomla style, done.
Done! (vm 2.6)!
The secondary admin user can login in the backend and see virtuemart.
He can modify according to vm permission
but he can view only his orders... maybe because he is in the vm
shopper groups instead of vm
admin group?
From where I can add this "secondary admin" to the vm admin group (not joomla's admin)?
Regards
Check your ACL configuration as that was fixed and works oK in VM2.6.6 (I just checked).
Quote from: jenkinhill on July 04, 2014, 18:05:35 PM
Check your ACL configuration as that was fixed and works oK in VM2.6.6 (I just checked).
are you viewing orders from other users
with a user in the shopper group?
you can view my settings attached.
Am I forgetting something?
[attachment cleanup by admin]
I'm using VM 2.6.0
Hi solved in this way:
I put the Manage VM under Administrator group and not under Public group.
I revoked Joomla's permissions on the Global Permission page so this users can't mess with joomla config.
I set permissions on VM.
This left me some problem:
I think that on VM are missing some permissions.
For example I can't give read permission to Orders but only write permission.
VM TEAM - please revisit your backend admin and test to make sure it is possible for someone other than a Super User to manage VM.
- I think it has something to do with backend admin access code related to restricting vmusers -> perms.
With all the joomla permissions working exactly as I want it for a Manager including being able to fully administer joomla users ... and then setting VM permissions so a Manager has access to everything ... the Manager user still does not see the orders and can only edit their own Shopper Info.
I have wasted too much time on this already and no matter what I try I found that only Super Users can manage VM. I have been struggling with this for over a year now and I have tried everything. I want to give the vendor 'Manager' access and permissions to VM without giving them access to Global Config, Extension Manager, select Components, etc. Simple right? BUT even as an Administrator the user is never able to manage orders without getting 'hacking attempt' message and can't edit a Shopper without getting 2 'hacking attempt' errors and then sent to their own Shopper Information page..!
I don't get it - but if I ever do find a solution I will post it here.
Thank You!
Quote from: Robert_ITMan on August 30, 2014, 15:12:26 PM
VM TEAM - please revisit your backend admin and test to make sure it is possible for someone other than a Super User to manage VM.
- I think it has something to do with backend admin access code related to restricting vmusers -> perms.
With all the joomla permissions working exactly as I want it for a Manager including being able to fully administer joomla users ... and then setting VM permissions so a Manager has access to everything ... the Manager user still does not see the orders and can only edit their own Shopper Info.
I have wasted too much time on this already and no matter what I try I found that only Super Users can manage VM. I have been struggling with this for over a year now and I have tried everything. I want to give the vendor 'Manager' access and permissions to VM without giving them access to Global Config, Extension Manager, select Components, etc. Simple right? BUT even as an Administrator the user is never able to manage orders without getting 'hacking attempt' message and can't edit a Shopper without getting 2 'hacking attempt' errors and then sent to their own Shopper Information page..!
I don't get it - but if I ever do find a solution I will post it here.
Thank You!
Completely agree with this man, I have tried everything since others told me it works but no matter what we do, the only capable of managing orders is the super admin and the admin only views his own orders as commented here.
Regards
Hi,
it seems this is working in 2.6.10.
BUT, it still strips HTML out of the short description. If someone is handling the products they also should be able to enter HTML code into the short description.
Uwe
Hello!
I'm agree whith the fact that storeadmin must be able to manage shopper adresse, orders and so on whitout be joomla super-user (checked by acl of course)
My 2cents solution :
patch the file /administrator/components/com_virtuemart/models/user.php
change all Permissions::getInstance()->check('admin') by Permissions::getInstance()->check('admin','storeadmin')
and it do prety well the jobs.
Best regards and thank you to the all forum team.
René
Hi,
I had to switch that check completely off. If a user is made a virtuemart admin by assigning permissions to the joomla manager user group he shows up as "shopper" in virtuemart. He can do all functions his group is assigned but can not enter HTML code into the short description. I think the VM team should change VM to checking permissions against joomla permissions instead of VM internal permissions (storeadmin and admin). It seems they have done so beside this little problem.
Just my opinion
Uwe
Harrstar, and all the others.
We use vm3 in our store since more than 2 months and anything works. There exists no storeadmin, admin anylonger. and as often described, it makes no sense todo this for vm2.6, because then vm2.6 would become almost vm3.
The html still needs superadmin right for security. I plan to add a new ACL option just for html.
Quote from: Cony on February 02, 2014, 00:47:39 AM
For listing orders and its details VM is currently checking the permission "admin". Unfortunately "admin" is only user with superadmin rights.
Seems, that the permission for displaying orders (which is possible to set in permissions of VM) is not calculated at all (why it is possible to set it then?)
Dirty hack for this is to change file /administrator/components/com_virtuemart/models/orders.php and replace all occurance of
Permissions::getInstance()->check("admin")
to
Permissions::getInstance()->check("storeadmin")
It should be there twic, once at line 152 and second at line 244 (for VM 2.0.26d).
It was already done for 244, but I missed it in line 152, thank you for that. No it is not a dirty hack, it is the right way for vm2.6. Will be committed to svn soon.
Thank you Milbo.
I would switch to VM3 in a heart beat if there would not be the problem that I am using VM for customers web sites. And I am a little uneasy using brand new versions on production web sites without extensive testing as we use lot's of 3rd party extensions and custom coding in our customer websites. And right now we are under a heavy dead line to finish, no time to switch to VM3.
Will most likely switch in 3 to 6 month.
Uwe
Hello
I JUST have migrated shop form VM 1 to VM 3.0.2 in Joomla 3.3.6.
It works great except permissions. Where is the problem I tray explain, because I need some help.
I need to make for some workers permissions only to VM, they can add new product and category.
So I create new user group it is shopper it is under admin.
Ok I go to VM I click on permissions button and I configure permissions but there is no possible to save configuration.
So I tray to make it form Joomla panel.
I chose VM and I configure permissions. Ok it works well, but when new client register to the shop and click on your order he can see all order in the shop. When I change permissions, that client can not see whole order in the shop (he can see only his), then I lost possibility to manage the VM as a user in shopergroup.
Any help for me.
Regards
I followed all suggestions in quotes below. I have scoured search engines and blogs for this major problem whereby ONLY one user can manage anything in the store.
VM version: 3.02 , Joomla version: 2.5.24. The store works great, administration does not work:
We only need someone else than the Joomla site administrator to be able to maintain the items in the store. I followed the steps to turn on multivendor etc as shown by
jenkinhil.
Milbo says below "
3. Open some list. Go to the new configuration setting in the upper right corner "Permissions". 4. Configure it in joomla style, done." When I do so, the permissions dialog box pops up with long lists of settings a save/save and close/cancel button yet
nothing in that Permissions configuration box is editable!
So currently the best I can get is a situation whereby the user can log on as an administrator, and even when I give that user "super user" rights we still are stuck with "
vmError: Access restricted to Vendor and Administrator only (you are admin and should not see this messsage?)" when that user logs on to the admin site and tries to click on the VirtueMart main menu.
Quote from: Milbo on September 09, 2013, 11:32:17 AM
Quote from: jenkinhill on June 20, 2013, 13:24:33 PM
You add another vendor from the backend. The new vendor/storeadmin should be registered in Joomla (add through Joomla's User Manager) and set to Administrator status.
1. in Config/Shop set Enable Multivendor (experimental only for developers) to administrated multivendor
2. Go to Orders & Shoppers/Shoppers. You will see a column labelled Vendor? - enable your new admin as vendor. Now there should be two ticked entries in that column.
3. Now on the came page select that username for editing. There you can enter the Vendor store details (will be same as the superuser-vendor) and Shopper Information tab should be the same as the superuser-vendor.
Then the new admin can log in and manage the store.
You can use Joomla's ACL if you want to make restrictions on what the new admin can edit.
This is correct. But I think they dont want new vendors, they want more than one login able to administrate the store or only parts of it, without access to the rest of joomla BE. To achieve this, the easiest way is to
1. Create a new joomla permission group.
2. Go in Virtuemart.
3. Open some list. Go to the new configuration setting in the upper right corner "Permissions"
4. Configure it in joomla style, done.
Finally found a solution, it cost me 15 Euro but works
I downloaded https://www.aclmanager.net/ and first let if fix a bunch of broken links etc, straightforward, but those fixes did not help.
I then went to ACLmanager and picked a group (VirtueMartUsers) that I had created before. I then selected the VirtueMart component "Global configuration". The group did not have the and gave that group the right to Configure the VirtueMart extension. And bingo it all works now.
So what the tool did was something like this: Give the group of VirtueMart users the right to manage Extensions. There may be a way to do this without buying the ACLmanager. If someone wants to explain that in a reply, great !
Quote from: blouwagie on January 02, 2015, 21:22:54 PM
I followed all suggestions in quotes below. I have scoured search engines and blogs for this major problem whereby ONLY one user can manage anything in the store. VM version: 3.02 , Joomla version: 2.5.24. The store works great, administration does not work:
We only need someone else than the Joomla site administrator to be able to maintain the items in the store. I followed the steps to turn on multivendor etc as shown by jenkinhil. Milbo says below "3. Open some list. Go to the new configuration setting in the upper right corner "Permissions". 4. Configure it in joomla style, done." When I do so, the permissions dialog box pops up with long lists of settings a save/save and close/cancel button yet nothing in that Permissions configuration box is editable!
So currently the best I can get is a situation whereby the user can log on as an administrator, and even when I give that user "super user" rights we still are stuck with "vmError: Access restricted to Vendor and Administrator only (you are admin and should not see this messsage?)" when that user logs on to the admin site and tries to click on the VirtueMart main menu.
Quote from: Milbo on September 09, 2013, 11:32:17 AM
Quote from: jenkinhill on June 20, 2013, 13:24:33 PM
You add another vendor from the backend. The new vendor/storeadmin should be registered in Joomla (add through Joomla's User Manager) and set to Administrator status.
1. in Config/Shop set Enable Multivendor (experimental only for developers) to administrated multivendor
2. Go to Orders & Shoppers/Shoppers. You will see a column labelled Vendor? - enable your new admin as vendor. Now there should be two ticked entries in that column.
3. Now on the came page select that username for editing. There you can enter the Vendor store details (will be same as the superuser-vendor) and Shopper Information tab should be the same as the superuser-vendor.
Then the new admin can log in and manage the store.
You can use Joomla's ACL if you want to make restrictions on what the new admin can edit.
This is correct. But I think they dont want new vendors, they want more than one login able to administrate the store or only parts of it, without access to the rest of joomla BE. To achieve this, the easiest way is to
1. Create a new joomla permission group.
2. Go in Virtuemart.
3. Open some list. Go to the new configuration setting in the upper right corner "Permissions"
4. Configure it in joomla style, done.
I have Joomla 3.4.1 and VirtueMart 3.0.4. I don't know if this is a permission issue or not. After loading new products to about number 60 in a category, it stops allowing me to load any more.
VM error comes up. Says You are not an authorized administrator or correct vendor, storing of product cancelled. Why is this happening? How can we fix this?
Thank-you,
Debi