Store vendor information with limited ACL

[n3t]

Hi,

I configured store owner user as limited user, with limited ACL. User can open store settings, but when he save it, nothing changes.
After long searching I found, that also "Configure ACL & Options" permission has to be set for this user to store the vendor info.
However now the user himself can change his ACL, so open additional parts of VM.

In saveUserData of VirtueMartModelUser this is checked:

Code Select Expand


if(!vmAccess::manager('core')){
unset($data['virtuemart_vendor_id']);
unset($data['user_is_vendor']);
}


This limitation is IMHO at least very confusing, as there is special ACL for edit shop function. Why Permissions ACL is required?

thanks

Joomla 3.8.5, VM 3.2.2 single vendor mode

[K&K media production]

VM 3.2.2

update vm

[Milbo]

if(!vmAccess::manager('core')){

means, you must be admininstrator or superuser