I have a node that references an order using an entity reference. When viewing the node as admin or as the user who created the order it works fine. When I view the same node as a user who has the "view all orders" privilege I can't see the order even though I should be able to.

I tracked this down to a typo in the uc_order_order_entity_access function in uc_orders.module.
line 884
if (user_access('view all_orders', $account)) {

should be

if (user_access('view all orders', $account)) {

Comments

tr’s picture

tr commented
Status: Active » Fixed

Fix committed. Thanks for finding that - it looks like it's been wrong for three years (!), ever since the initial D7 port of Ubercart.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.