magento-hackathon / advancedacl Goto Github PK

In the current implementation, the grids are filtered by the selected stores. Hence, you e.g. may see order 123, but you are not allowed to see order 122. This works when looking at Sales > Orders. But even if you are not allowed to see order 122, you can see it in detail when simply changing the ID in the URL. So you can view any order by entering https://www.store.com/funkyadminname/sales_order/view/order_id/ANY_ORDER_ID/key/YOUR_FORM_KEY/.

This problem definitely exists for orders, but I guess it also exists for most of the other filtered data.

I have created admin user 'admin2' has permission of only website2store1 but after logged in to admin with user 'admin2', it shows the customers registered with website1store 1 also.

As this is an admin extension the events should only be configured in the adminhtml scope

When this extension is enabled and you connect via the SOAP API, you get the following error:

Fatal error: Uncaught SoapFault exception: [SOAP-ENV:Server] Call to a member function getRole() on null
SoapFault: Call to a member function getRole() on null

Unfortunately, the error does not tell you where this happens. After a hard debugging session, I found the issue. PR coming.

Hello, i have installed the module and cleared the cache, but when i try to login into the backend i have this error.

Fatal error: Call to a member function getRole() on a non-object in C:\xampp\htdocs\magento\app\code\community\MagentoHackathon\AdvancedAcl\Helper\Data.php on line 152

Whats happened?

After installing to MAgento 1.9.2.2 and logout have backend server error. and unable to show login forms. If delete the module , everything is ok and backend worked.

Petr J.

When a product is created by a restricted user, it needs to be invisible in store views, this user does not has access to.

When a product is updated, this setting is not to be changed for other users, since they may want to have it visible.

add observer to adminhtml_controller_action_predispatch_start to check if the user has access to the current controller.

delete AdvancedAcl/Model/Adminhtml/System/Store.php since it's only copy and paste from Magento's code base

after creating a the Role for a single store on a single website multi store magento 1.9.2.4 setup,

1. the customers grid doesnt populate at all... it does when I login as "superadmin" but as a restricted user login this listing has 0 customers

2. the sales order grid returns this error:

sales order grid error.txt

any help will be most appreciated.
bijal

Hi,
Searching for Store specific admin user for you page on stackoverflow. I want know if this support Magento2.