Hi,
but it might take a while until it's fully there
It depends your conception of "take a while", because the next release will be next week.... But if you don't want it in the next release, it's not a problem for me.
The ACL only allows enabling/disabling both, publishing and unpublishing. IMHO, a fairly simple solution could be in making it two separate ACL items, one for "publish", the other for "unpublish". Hmm?
Yes, but like that no.
I don't want that people can unpublish a product with a single click without having the right to cancel it.
At this moment, the action of "publishing" or "unpublishing" should have a confirmation in order to be sure that the user didn't click by accident. Otherwise the store owner will have a lot of complains on "I unpublished my product by accident".
I clearly understand that you want a fast solution and I'll do my best to ally your current requirements to the "rest of the world" and to the plan I have for HikaMarket.
an even simpler step could be to either hide or disable the "publish" radio button in the vendor's product add/edit page
You just have to edit the view and replace
if(hikamarket::acl('product_edit_published')) {
by something like
if(hikamarket::acl('product_edit_published') && $this->vendor->vendor_id <= 1) {
It's not the full best solution for the "security" point of view ; that's why I will recommend you to use a custom plugin too (in order to remove the "product_published" from the product data for product updates from the front-end)
Regards,