Needs work
Project:
Commerce Reporting
Version:
7.x-4.0-beta2
Component:
Code
Priority:
Normal
Category:
Bug report
Assigned:
Unassigned
Issue tags:
Reporter:
Created:
7 Jun 2015 at 04:57 UTC
Updated:
3 Sep 2015 at 13:51 UTC
Jump to comment: Most recent, Most recent file
Comments
Comment #1
crimsondryad commentedI don't want to hijack your issue. In my case, the problem with not seeing report totals was that the person viewing the commerce reports must have the "View Any Order" permission. For our organization, that means that Marketing groups who don't necessarily need access to PII now must be able to see full order data.
The preferred behavior would be to have a permission for "View aggregated order data" that would allow folks without the "View Any Order" permission to have access to the Commerce Reports.
Comment #2
mglamancrimsondryad, thanks for the insight! This is highly likely that entity access permissions are preventing Views from returning out. The alternative is to disable SQL rewriting so that the "I can access this view" permission is good enough.
I think it's safe to disable rewriting, rely on "Access commerce reports."
Comment #3
mglamankylahuff, also do any of the other views work?
Comment #4
mglamanComment #5
mglamanHere is a patch which tests and proves issue in #1. Test will fail. We need to get this to pass.
Comment #7
mglamanPatch adds disabling of rewrite. This means that data within the view is only access checked by the main access plugin - the permission. This works fine when placed or viewed normally, but if manually rendering a view or block you would need to perform proper check of
$view->access().Comment #9
mglamanTrying patch from other computer. For some reason test bot does not like my laptop's patches.