Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
Hey,
When editing the address information(shipping/billing doesnt matter) as a user, below there is an extra Box with Admin features ("User Information->owned by" and "Status->active/inactive") which should not be there. That way a User can assign his shipping/billing adresses to random shop Users, which is not good. Only Admins should be allowed to do so.
I've tried different combinations of user rights/roles but I can't find a solution to this problem with regular 'Drupal' methods.
Thanks in advance!
Comment | File | Size | Author |
---|---|---|---|
#1 | commerce_addressbook.module.patch | 577 bytes | JulienD |
drupal-addressbook.jpg | 24.81 KB | phosgen |
Comments
Comment #1
JulienD CreditAttribution: JulienD commentedHello phosgen
This issues has been fixed in the dev version of the module. The problem came from the use of an admin form for user without removing some parts of this form.
I've attached a patch to solve the problem on the version 7.x-2.0-rc2.
Best.
Comment #2
phosgen CreditAttribution: phosgen commentedHey Julien,
Thank you very much for the quick reply!
I used the Patch and it solves the problem but also removes the form for the admin when editing the adress date within a userprofile. It is now just accesible within the Shop-Menu within Drupal-Commerce, which is fine for me.
Thanks again and keep up the good work!
Phos
Comment #3
jsacksick CreditAttribution: jsacksick commentedMark this as fixed. @phosgen: In your screenshot you were logged as admin.