Author Topic: Permission error - Customplugins gone after product edit  (Read 234 times)

welrachid

  • Jr. Member
  • **
  • Posts: 220
  • 3rd party plugin developer
  • Skype Name: wel.rachid
  • VirtueMart Version: Always LATEST stable
Permission error - Customplugins gone after product edit
« on: June 21, 2018, 15:51:12 pm »
Hi guys
J!3.8.8
VM 3.2.14

Today we experienced that a products plugins disappear when saving from a sub-manager account.
We have a company doing the texts on products and they are set up with these access:

Access Administration Interface
VM Manager
Allow HTML Input ( so that they can do html in long description)
Product access
Product edit

We do however not want them to be able to change customplugins or media files or anything else.

its a custom usergroup we call seoguys placed under "manager"
public
- guest
- manager
| - admin
| - pricegroup (custom group that only gives access to products but no edits - so that they can get in a see pricing formular)
| - seoguys
- registered
| - author
| | - Editor
| | | - Publisher
- Super Users


Can any of you tell me if this is an error or not?
I can see that there ARE permissions called something with customfields, but i dont want them to be able to edit them.

Its ALL of the plugins that are removed from the product (we have 2 text, 1 custom price calculator and 1 fileuploader)

Thanks
- Wel
Best regards,
Wel

Milbo

  • Virtuemart Projectleader
  • Administrator
  • Super Hero
  • *
  • Posts: 9591
  • VM3.2 Cached and Optimized
    • VM3 Extensions
  • VirtueMart Version: VirtueMart 3 on joomla 3
Re: Permission error - Customplugins gone after product edit
« Reply #1 on: June 24, 2018, 10:09:17 am »
Neither the function store in the product model, nor the function "storeProductCustomfields" is checking the any customfield related acl. I doubt that this is an ACL problem.

If it is an ACL problem, it should be possible to solve it, by giving the "right" permission. Then I can take a look and check why this perm makes trouble. But it should work as you configured it.
I should fix your bug, please support the VirtueMart project and become a member
______________________________________
Extensions approved by the core team: http://extensions.virtuemart.net/

welrachid

  • Jr. Member
  • **
  • Posts: 220
  • 3rd party plugin developer
  • Skype Name: wel.rachid
  • VirtueMart Version: Always LATEST stable
Re: Permission error - Customplugins gone after product edit
« Reply #2 on: June 25, 2018, 13:08:24 pm »
Hi Milbo.
I can confirm that there is an issue then. Look at this video:
https://www.youtube.com/watch?v=6_2D8leXMB4&feature=youtu.be&hd=1

Permissions can be seen here:
https://pasteboard.co/Hrw9c8p.png

Everything not on the permission image is not allowed (red)
Best regards,
Wel

welrachid

  • Jr. Member
  • **
  • Posts: 220
  • 3rd party plugin developer
  • Skype Name: wel.rachid
  • VirtueMart Version: Always LATEST stable
Re: Permission error - Customplugins gone after product edit
« Reply #3 on: July 02, 2018, 23:19:59 pm »
can someone else perhaps confirm this issue?
Best regards,
Wel