Problem/Motivation

A non-admin user cannot access to his orders. In my use case I've created a view where we need info from the order and from the line items. Something like this:

Basically I need the list of the line items in one field + the order id + the date.

Well, the line items are rendered for admin users but not for authenticated users.

Proposed resolution

I found a couple of issues related #2715273: Implement full permissions for every entity type and #1935068: Non Admin users cannot access Orders but finally I decided to create a new one with a handler for that.

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

marthinal created an issue. See original summary.

marthinal’s picture

Title: Create the role "view own orders" » Create the permission "view own orders" and adding an access control handler

Oops! :)

mglaman’s picture

We'll leave this here for now, but it'll be outdated by #2715273: Implement full permissions for every entity type once Entity API does this work for us.

mglaman’s picture

mglaman’s picture

Status: Needs review » Needs work

This is no longer applying after the line item rename

mglaman’s picture

Status: Needs work » Needs review
FileSize
2.99 KB

Rerolled for now. We're making headway on implementing generic permission generation and handling.

bojanz’s picture

Status: Needs review » Fixed

Fixed by #2715273: Implement full permissions for every entity type, which added a "view own commerce_order". Thanks!

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.