I ran into an issue when trying to provide granular access to "Order settings" and "Manage Orders" in permissions. Based on the current availability of permissions these two are lumped into one permission called "Administer orders". I could see separating these two as a better approach. One could be defined as more of an admin function and the other as a staff function. Thoughts?

Order settings
Configure general order settings, fields, and displays.

Orders
Manage orders in the store.

Comments

m_wiking’s picture

m_wiking commented

I ran in to the same issue. I'm worried giving access to order setting.

rszrama’s picture

rszrama commented
Issue tags: +1.1 blocker

Just to be clear, you're looking to give a person access to administer (i.e. create, view, update, and delete any order on the site) but don't want them having access to an order settings page that shows help text and field management interfaces?

pixelsweatshop’s picture

pixelsweatshop commented

correct :).

m_wiking’s picture

m_wiking commented

Yes, for me too :)

rszrama’s picture

rszrama commented
Status: Active » Fixed

Added the Configure order settings permission with an update function that automatically grants it to any role that already has the Administer orders permission.

Commit: http://drupalcode.org/project/commerce.git/commitdiff/6c4c225

Automatically closed -- issue fixed for 2 weeks with no activity.