View Issue Details

IDProjectCategoryView StatusLast Update
0005652OXID eShop (all versions)2.5. Administer userspublic2017-06-28 14:08
Reporteroxbertrand Assigned To 
PriorityhighSeveritymajorReproducibilityalways
Status closedResolutionno change required 
OSDebianOS Version7 
Product Version4.8.7 / 5.1.7 
Summary0005652: Tobasket button is visible and works, if removed from shop role user belongs to
DescriptionTOBASKET button is visible for user, if user belongs to Role where this, TOBASKET ident, is removed in Role configuration.
Steps To ReproducePre-conditions:
1. User belongs to user group "X"

1. Create a new Shop Role
2. Remove TOBASKET ident from the list
3. Assign this Role to user group "X"
4. Log in to shop with user from group "X" and open a details page
Additional InformationPlease check not only deletion of TOBASKET ident, but enabling and disabling of TOBASKET ident for the role - if it works correctly too.
TagsEE, Rights & Roles
ThemeAzure
BrowserAll
PHP Version5.4
Database Version5.5

Activities

jurate.baseviciene

2014-02-20 15:26

reporter   ~0009554

Reminder sent to: oxbertrand

Hi,

Unfortunately we can't reproduce this bug. Could you please give us more details how to reproduce this case?
Which version shop do you use?
Which Paypal module version the shop has?

Best regards

leofonic

2014-03-03 14:35

reporter   ~0009600

Last edited: 2014-03-03 14:41

In demoshop, switch on PP-module, PP-Express buttons are visible in detail page and basket although PP is not yet assigned to any shipping methods. If you log in, the buttons disappear.

When usergroups are assigned, PP buttons and payment method appear, this should not be the case because user group assignement is not needed in newer versions.

jurate.baseviciene

2014-03-03 17:01

reporter   ~0009601

@leofonic: Thanks a lot for submitting this issue to the description, but it is other case. So we created other bug entry 0005672.

leofonic

2014-03-03 18:04

reporter   ~0009602

Thank you, i noticed this too when i re-read the description ;-)

saulius.stasiukaitis

2014-09-11 14:39

reporter   ~0010149

Need to change description as this is not directly PayPal, but more to shop related bug.
PayPal ECS button is not visible. Shop add to basket button is visible.

cesnauskast

2014-09-11 14:55

reporter   ~0010150

PayPal ECS button is visible, because of not correct configuration.
If user belongs to user group, which is assigned to created role and do not belong to any user group, which is assigned to PayPal payment method, then user won't be able to see a PayPal ECS button.

QA

2017-06-28 14:08

administrator   ~0012163

Last edited: 2017-06-28 15:22

The feature works as intended.
There is one important point to consider while setting up custom R&R.
You can't directly remove rights from user group X by setting a role and remove the right (i.e. TOBASKET).
To achieve that you actually set up a role that has the right you want to remove from your user group X and add all other user groups to the new role. Now your group is missing the right.

In short:
you can't directly remove rights from groups but rather indirectly remove them by giving the rights exclusively to all other groups.



Here is the link to the official docu:
https://www.oxid-esales.com/de/support-services/dokumentation-und-hilfe/oxid-eshop/enterprise-edition/rechte-und-rollen.html