Shop profile: Managers aren't allowed almost anything
- Status
- Open
- Subject
- Shop profile: Managers aren't allowed almost anything
- Version
- 18.x
- Category
- Consistency
- Feature
- Trackers
- Resolution status
- New
- Submitted by
- hman
- Lastmod by
- hman
- Rating
- Description
The Shop profile does create two new groups: Customers and Managers. Managers get some permissions in regard to payments, but none for trackers. This means Managers aren't allowed to populate the products tracker with items, only admin can do that. Also, they aren't allowed to remove tracker items. The entire permissions roster should be checked for consistency.
Also, it should be checked whether or not tiki_p_view_category should be granted to anonymous, otherwise the category won't be output in the shop. Another story is tiki_p_list_trackers. In the default shop profile, this is granted to anonymous, but still for some reason only the admin can list the products tracker?
Thanks
hman- Importance
- 5
- Easy to solve?
- 5
- Priority
- 25
- Demonstrate Bug on Tiki 19+
-
This bug has been demonstrated on show2.tiki.org
Please demonstrate your bug on show2.tiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show2.tiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Demonstrate Bug (older Tiki versions)
-
This bug has been demonstrated on show.tikiwiki.org
Please demonstrate your bug on show.tikiwiki.org
Show.tiki.org is not configured properlyThe public/private keys configured to connect to show.tikiwiki.org were not accepted. Please make sure you are using RSA keys. Thanks.
- Ticket ID
- 7365
- Created
- Monday 11 May, 2020 05:53:01 UTC
by hman - LastModif
- Monday 11 May, 2020 05:53:01 UTC