View Issue Details

IDProjectCategoryView StatusLast Update
0007323OXID eShop (all versions)2.5. Administer userspublic2024-06-12 15:13
Reportermichael_keiluweit Assigned To 
PriorityurgentSeveritycrashReproducibilityalways
Status confirmedResolutionopen 
Product Version6.4.2 
Summary0007323: EE, R&R: Products of exclusive categories aren't exclusive, when added afterwards
DescriptionScenario: Only specific user groups are able to see the products of a category.
Problem: If a product is added after the rights were set, the product is still viewable for everyone in the frontend, since the information wasn't stored in the table oxobjectrights, like it is done when assigning a group to the right (\OxidEsales\EshopEnterprise\Application\Controller\Admin\CategoryRightsVisibleAjax::addGroupToCatView).
Steps To Reproduce1. goto admin.
2. Create a category a.
3. Assign an user group within the tab "rights > 'Assign User Groups (Exclusively visible)'" to this category.
4. Only members of the user group should see the category and its products now.
5. Add another product to the category.
6. Search for the just added product, you will find it - but you shouldn't.

Additional InformationWorkaround: Remove the user groups from the right 'Assign User Groups (Exclusively visible)' and reassign them.
TagsEE, Rights & Roles
ThemeNot defined
BrowserNot defined
PHP VersionNot defined
Database VersionNot defined

Relationships

related to 0007650 confirmedHR EE: Removing products from a category doesn't respect the viewable / buyable rights 

Activities

There are no notes attached to this issue.