Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.As currently implemented, an user with access to 'view all orders' can add order comments, admin comments, and change the order status.
In the event your store has users on the management side that should only have access to view orders but not change their status, there does not appear to be a good way to implement that ability.
The attached patch adds additional permissions for:
- Add Admin Comment
- Update Order Status
- Send Email on update
In this manner, you can configure roles that can access all orders, and add regular order comments, but must have specific permissions to add an order comment, change an order status, or generate an email for any changes made.
| Comment | File | Size | Author |
|---|---|---|---|
| order_perms.patch | 2.37 KB | willvincent | |
Comments
Comment #1
excell CreditAttribution: excell commentedHi, I am trying to set limited access to view orders and find when I give the "view all orders" permission the people can change status, add notes & view payments etc. Would this patch help me to do what the permission implies - enable people to view orders ONLY?
Comment #2
TR CreditAttribution: TR commentedNew features should go into 7.x-3.x first.
Comment #3
SilviuChingaru CreditAttribution: SilviuChingaru commentedTry Ubercart Order Access.
Comment #4
longwaveI am not sure we need more permissions in core, and UC Order Access seems to fit the bill in contrib.