View Issue Details

IDProjectCategoryView StatusLast Update
0007323OXID eShop (all versions)2.5. Administer userspublic2022-06-14 14:26
Reportermichael_keiluweit 
PrioritynormalSeveritymajorReproducibilityalways
Status confirmedResolutionopen 
Product Version6.4.2 
Target VersionFixed in Version 
Summary0007323: EE, R&R: Products of exclusive categories aren't exclusive, when added afterwards
DescriptionScenario: Only specific user groups are able to see the products of a category.
Problem: If a product is added after the rights were set, the product is still viewable for everyone in the frontend, since the information wasn't stored in the table oxobjectrights, like it is done when assigning a group to the right (\OxidEsales\EshopEnterprise\Application\Controller\Admin\CategoryRightsVisibleAjax::addGroupToCatView).
Steps To Reproduce1. goto admin.
2. Create a category a.
3. Assign an user group within the tab "rights > 'Assign User Groups (Exclusively visible)'" to this category.
4. Only members of the user group should see the category and its products now.
5. Add another product to the category.
6. Search for the just added product, you will find it - but you shouldn't.

Additional InformationWorkaround: Remove the user groups from the right 'Assign User Groups (Exclusively visible)' and reassign them.
TagsEE, Rights & Roles
ThemeNot defined
BrowserNot defined
PHP VersionNot defined
Database VersionNot defined

Activities

There are no notes attached to this issue.