Hey,

When editing the address information(shipping/billing doesnt matter) as a user, below there is an extra Box with Admin features ("User Information->owned by" and "Status->active/inactive") which should not be there. That way a User can assign his shipping/billing adresses to random shop Users, which is not good. Only Admins should be allowed to do so.

I've tried different combinations of user rights/roles but I can't find a solution to this problem with regular 'Drupal' methods.

Thanks in advance!

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

JulienD’s picture

Hello phosgen

This issues has been fixed in the dev version of the module. The problem came from the use of an admin form for user without removing some parts of this form.

I've attached a patch to solve the problem on the version 7.x-2.0-rc2.

Best.

phosgen’s picture

Hey Julien,

Thank you very much for the quick reply!
I used the Patch and it solves the problem but also removes the form for the admin when editing the adress date within a userprofile. It is now just accesible within the Shop-Menu within Drupal-Commerce, which is fine for me.

Thanks again and keep up the good work!
Phos

jsacksick’s picture

Status: Active » Fixed

Mark this as fixed. @phosgen: In your screenshot you were logged as admin.

Automatically closed -- issue fixed for 2 weeks with no activity.