Dolibarr ERP & CRM » Bugs » bug #1183 External users with "List products" permission does not list productsLatest modifications
Answer now
Snapshot| Details |
| Last Modified On: | 2014-01-21 17:48 | | Submitted by: | Marcos García (marcosgdf) |
| Submitted on: | 2013-12-08 20:01 | |
| Summary: | External users with "List products" permission does not list products |
| Description: | I've added a contact for a third and then created an user for it. I've logged with the created user and it can't list products but it does have permission for it. |
| Step to reproduce bug: | |
| Detected in version: | 3.4.1 | | Category: | Module: Products-Services |
| Severity: | 8 | | OS Type/Version: | |
| PHP version: | | | Database type and version: | |
| Status |
| Status: | Need more info | | Assigned to: | Laurent Destailleur (eldy) |
| Resolution: | Works for me | |
Comments- Laurent Destailleur 2014-01-21 17:48
- I have made some fixes recently (but into 3.5 branch only) but i am not sure it fixes what your report because i am not sure to understand.
So can test with last 3.5 branch ? - Marcos García 2014-01-06 22:53
- If external users should not see product list then I think you can close the issue... But in a clean installation of dev branch, it can be reproduced with the following steps:
1. enable thirds and products module
2. create a third
3. create a contact for the third
4. create a user account for the third
5. grant list products permission
6. logout
7. login as external user
8. see that product search box - Laurent Destailleur 2014-01-06 09:55
- The rule is just because security/test is not yet implemented onto other modules, also most other modules may be useless for external users.
But this should not be your problem. However, i can't reproduce it.
Did you succeed in reproducing it with dev branch ?
- Marcos García 2014-01-06 07:26
- Oh. Didn't read the alert. Is that rule because of anything in special?
I used the product search box to access the product area. - Laurent Destailleur 2013-12-17 00:10
- Do you have also problem with 3.5 ?
With 3.5.0, there is a rule for external users: only following modules are opened to external users (whatever are permission of such users): Third parties, Invoices, Customer Orders, Users & groups, Contracts, Agenda, Suppliers, Projects, Interventions, Shipments
So user should not have permission on products. Can you tell me which path user used to open a product ?
|
|
None→ Works for me