0007323: EE, R&R: Products of exclusive categories aren't exclusive, when added afterwards

ID	Project	Category	View Status	Date Submitted	Last Update

0007323	OXID eShop (all versions)	2.5. Administer users	public	2022-06-03 13:33	2023-07-26 12:05

Reporter	michael_keiluweit	Assigned To
Priority	urgent	Severity	crash	Reproducibility	always
Status	assigned	Resolution	open
Product Version	6.4.2

Summary	0007323: EE, R&R: Products of exclusive categories aren't exclusive, when added afterwards
Description	Scenario: Only specific user groups are able to see the products of a category. Problem: If a product is added after the rights were set, the product is still viewable for everyone in the frontend, since the information wasn't stored in the table oxobjectrights, like it is done when assigning a group to the right (\OxidEsales\EshopEnterprise\Application\Controller\Admin\CategoryRightsVisibleAjax::addGroupToCatView).
Steps To Reproduce	1. goto admin. 2. Create a category a. 3. Assign an user group within the tab "rights > 'Assign User Groups (Exclusively visible)'" to this category. 4. Only members of the user group should see the category and its products now. 5. Add another product to the category. 6. Search for the just added product, you will find it - but you shouldn't.
Additional Information	Workaround: Remove the user groups from the right 'Assign User Groups (Exclusively visible)' and reassign them.
Tags	EE, Rights & Roles

Theme	Not defined
Browser	Not defined
PHP Version	Not defined
Database Version	Not defined