This was noticed in a new kickstart install when using a user without uid = 1.

this path: admin/commerce/products [a view] has an ajax link to

this path: commerce_backoffice/variations/50

which is handled by the commerce_backoffice module. The menu item has access permissions limited to

"administer products", which appears to correspond to an item in the permissions list "Administer products".

But, you get an access denied by anyone but uid = 1, and I can't find anywhere where the 'administer products' permission is actually defined.

Is this actually a bug or something in D7 that I don't understand?

CommentFileSizeAuthor
#2 coperm.diff716 bytesadixon

Comments

bojanz’s picture

bojanz commented

That needs to be changed to "administer commerce_product entities", since the "administer products" permission no longer exists.

adixon’s picture

adixon commented
StatusFileSize
new coperm.diff716 bytes

Thank, you that was it. Patch to the 7.x-2 branch of the install profile attached.

adixon’s picture

adixon commented
Status: Active » Needs review
guguss’s picture

guguss commented

Thanks for reporting.

Your patch has been commited to Gerrit : https://code.drupalcommerce.org/#/c/147/

bojanz’s picture

bojanz commented
Status: Needs review » Fixed

Merged, thanks!

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.