Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.I found user can access all the orders' status if the view all orders permmision was granted.
However, users can not only see own order status if they only have the permiision of viewing own order status.
anyone has ideas?
| Comment | File | Size | Author |
|---|---|---|---|
| #5 | 794412-user-order-actions.patch | 2.07 KB | longwave |
Comments
Comment #1
longwaveThey can see their own orders at user/UID/orders if they have "view own orders" permission.
Comment #2
MickC CreditAttribution: MickC commentedAuthenticated user can see the Orders list, however the Actions icons are not visible with just View Own Order permission.
I could only get the Actions icon to appear by granting authenticated user "View All Orders".
Using Ubercart Views I've created a view which overrides Orders, validating on current user to prevent viewing others orders.
Is this a bug?
Comment #3
MickC CreditAttribution: MickC commentedDon't want to duplicate issue, so setting this one to Active so this gets picked up -tks.
Comment #4
longwaveActions were designed for admins only, this case hasn't been needed before, so changing to a feature request and bumping to 7.x-3.x where it will be implemented first.
You could implement this without the actions field by adding a field that links to the order view URL.
Comment #5
longwaveComment #6
longwaveCommitted to 7.x in #1410054: Replace user and admin order history pages with Views
Can be backported to 6.x
Comment #7
longwavePorted and committed to 6.x: http://drupalcode.org/project/ubercart.git/commitdiff/5fa1e7e