Allow authenticated users to add payments to their orders

Hello,

Here is the explanation: digging into code, one can read:
if (user_access('create payments', $account)) {
// We currently allow any user to create any payment transaction,
// regardless of the order, because entity_access() doesn't give us a
// way to discriminate on the order.
// @todo: find a way to prevent creating a payment transaction if the
// user doesn't have access to the order.
if (!isset($order) || commerce_order_access('update', $order, $account)) {
return TRUE;
}

So, "create" is the good one, but is not enough => user MUST have update permission on the related order.
Problem is :
-> I don't want a user to modify orders, once validated.
-> I want to allow user submitting payments for non-balanced orders.

Then, I have to remove that piece of code related to the order permission.

Hi All,

I modified this function: function commerce_payment_transaction_order_access($op, $order, $account = NULL)
And removed the test : // if (!isset($order) || commerce_order_access('update', $order, $account)) { }
Then , it now returns the user_access('create payments', $account)) permission.
This is exactly what I needed: each time a user views an order, the payment table is drawn and the user has the ability to apply for a new payment transaction.

You are probably right. I should write a module for that... But Not enough skilled for the time being...

Thx