Product variation access makes it impossible to restrict product management to owners

Created on 1 November 2018, about 6 years ago

Updated 16 July 2024, 4 months ago

I enabled the following permissions:

- "Create products"
- "Delete own products"
- "Update own products"

When I go to my product page, I can edit it. But when I go on the tab "Variations", it is written access denied.

How to change the variations of my own products ?

If I activate the "[Product variations] Manage Product" permission, I can change the variations of my products and products that do not belong to me.

It's a big problem.

Why does the "Update own products" permission not allow the author to modify the variations of this product ?

🐛 Bug report

Status

Needs work

Version

2.0

Component

Product

Created by

🇫🇷France zenimagine

Live updates comments and jobs are added and updated live.

Incomplete comments

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Comment almost 2 years ago →
🇩🇪Germany cspitzlay 🇩🇪🇪🇺
What is the meaning of a permission "create own <whatever>"?
Comment about 1 year ago →
🇨🇷Costa Rica melisa.cordero
Patch #33 works for me, but the 'Duplicate' option shows even if I don't assign the user with the permission to duplicate variations.
Comment about 1 year ago →
🇨🇷Costa Rica melisa.cordero
I would add some additional code to patch #33 to fix that detail.
Comment 4 months ago →
🇨🇴Colombia kayograco
It would be nice to have this functionality out of the box with Commerce Core module. I don't know how to install a patch so I will have this issue on my marketplace until is officially released.

Production build 0.71.5 2024