View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0007323 | OXID eShop (all versions) | 2.5. Administer users | public | 2022-06-03 13:33 | 2024-06-12 15:13 |
Reporter | michael_keiluweit | Assigned To | |||
Priority | urgent | Severity | crash | Reproducibility | always |
Status | confirmed | Resolution | open | ||
Product Version | 6.4.2 | ||||
Summary | 0007323: EE, R&R: Products of exclusive categories aren't exclusive, when added afterwards | ||||
Description | Scenario: Only specific user groups are able to see the products of a category. Problem: If a product is added after the rights were set, the product is still viewable for everyone in the frontend, since the information wasn't stored in the table oxobjectrights, like it is done when assigning a group to the right (\OxidEsales\EshopEnterprise\Application\Controller\Admin\CategoryRightsVisibleAjax::addGroupToCatView). | ||||
Steps To Reproduce | 1. goto admin. 2. Create a category a. 3. Assign an user group within the tab "rights > 'Assign User Groups (Exclusively visible)'" to this category. 4. Only members of the user group should see the category and its products now. 5. Add another product to the category. 6. Search for the just added product, you will find it - but you shouldn't. | ||||
Additional Information | Workaround: Remove the user groups from the right 'Assign User Groups (Exclusively visible)' and reassign them. | ||||
Tags | EE, Rights & Roles | ||||
Theme | Not defined | ||||
Browser | Not defined | ||||
PHP Version | Not defined | ||||
Database Version | Not defined | ||||