Hi,
Why is VM not using the normal way of managing the permissions in extensions?
Why is VM using access.xml
http://docs.joomla.org/J2.5:Developing_a_MVC_Component/Adding_ACL#Adding_Access_Control
The ACL in VM2.0.22c is a partial implementation mainly for test/development purposes. As stated in http://virtuemart.net/news/list-all-news/445-virtuemart2go-and-important-updates "Thanks to Jeremy Magne aka Daycounts, the ACL is also implemented, but is still in flux."
But why using access.xml and not like Joomla standards and most of the other extensions are using