VirtueMart Forum

VirtueMart 2 + 3 + 4 => Administration & Configuration => Topic started by: bsntech on February 17, 2015, 19:53:10 PM

Title: Current Shopper Can Be Changed By Anyone
Post by: bsntech on February 17, 2015, 19:53:10 PM
VirtueMart version 3.0.2 and Joomla version 3.3.6.

In the Configuration -> Checkout, the "Allow Administrators to change the current Shopper" is checked.

However, the option to change the shopper is shown for ANYONE.  I used a different computer - that I have never logged into the website - and the option to change the shopper still showed up on the checkout screen.

Screenshot is attached that shows that no one is even logged in (since it is asking for username and password) - but yet the "Change Shopper" option appears below that with the drop-down menu of shoppers.

Don't know if anyone else is seeing a lot of problems with VirtueMart 3.0.2 - but it seems completely littered with issues.  I was using VirtueMart 2.5 perfectly fine.
Title: Re: Current Shopper Can Be Changed By Anyone
Post by: bsntech on February 17, 2015, 19:59:24 PM
After updating to Virtuemart 3.0.4, the Change Shopper box still is there, but now in the drop-down, it says "Select an Option" and there is no customers in there.

That certainly is a good start - although that entire option shouldn't show up unless an admin is logged in.  I can see it confusing customers.
Title: Re: Current Shopper Can Be Changed By Anyone
Post by: jenkinhill on February 17, 2015, 23:31:48 PM
Either you have a template override that needs updating for the current versions or you have misconfigured Joomla's ACL to give shoppers some admin rights.
Title: Re: Current Shopper Can Be Changed By Anyone
Post by: bsntech on February 17, 2015, 23:54:11 PM
Only ACL changes were made in the VirtueMart side.

I gave the "Administrator" group "Allowed" access to all items in VirtueMart.

Double-checked the Guest and Public groups and they are set with Inherited - and they show the Calculated Setting as "Not Allowed".
Title: Re: Current Shopper Can Be Changed By Anyone
Post by: gabrielperez77 on March 24, 2015, 04:25:11 AM
Hi. I have same issue. Using Joomla 3.4.0 and Virtuemar 3.0.4.
Did you fix it?