Permission "Access orders with own products" or allow 'view' override on commerce_entity_access()

Created on 9 February 2012, almost 13 years ago
Updated 24 February 2024, 9 months ago

If I understand correctly, there is no way to restrict access to only orders with products created by a user.

Because of this, we are kinda half way to a multistore. We can restrict access to view/edit 'own products' but ten we let the user access 'all orders' 'own orders' or 'no orders'. In a multistore user would have to have access only to orders which pertain to him as a seller and not be able to view orders for products of others.

1. Default permissions check does not allow for such a setup
2. commerce_entity_access() does not allow override on 'view' operation.

I can see how it could be difficult to decide on treating orders with products of multiple owners out of the box, so perhaps you could allow overriding of commerce_entity_access() also on view and this way enable a more fine grained access.

Feature request
Status

Active

Version

2.0

Component

Order

Created by

🇵🇱Poland Maciej Lukianski

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

  • 🇳🇬Nigeria chike Nigeria

    Using Drupal 10.2.3 and Commerce 8.x-2.38 I am still not able to let users see only orders on their own products.

Production build 0.71.5 2024