Hi,
I was expected it was a problem with the token validation passed in the url. It wasn't.
Please edit the file "administrator/com_hikamarket/classes/product.php" and replace:
protected $toggle = array('product_published' => 'product_id');
By
protected $toggle = array('product_published' => 'product_id');
protected $toggleAcl = array('product_published' => 'product_edit_published');
And
if(!$app->isAdmin() && ((int)$value == 0 || empty($this->toggle[$task]) || !hikamarket::acl('product_edit_'.$task) || !hikamarket::isVendorProduct((int)$value) ))
By
if(!$app->isAdmin() && ((int)$value == 0 || empty($this->toggle[$task]) || ( empty($this->toggleAcl[$task]) && !hikamarket::acl('product_edit_'.$task) ) || ( !empty($this->toggleAcl[$task]) && !hikamarket::acl($this->toggleAcl[$task]) ) || !hikamarket::isVendorProduct((int)$value) ))
Regards,