Admin Main Menu unaffected by permissions settings

  • Posts: 34
  • Thank you received: 0
12 years 9 months ago #40602

Hi,

Having configured the permissions for a Store Manager, I noticed that while the Hikashop menu does reflect what I configured under "Access", the Admin Main Menu still shows everything Hikashop (under "Components"), including "Configuration" that was one of the main things I wanted to hide from the client...

I checked and re-checked various Access options (Joomla and Hikashop) and I didn't find anything related, but if I simply missed something, please let me know...

Thanks,
Zoltan

Please Log in or Create an account to join the conversation.

  • Posts: 82863
  • Thank you received: 13372
  • MODERATOR
12 years 9 months ago #40605

Hi,

That's not a bug. That menu cannot be dynamic as it is displayed by Joomla.
That's why you always see it.

Please Log in or Create an account to join the conversation.

  • Posts: 34
  • Thank you received: 0
12 years 8 months ago #41174

Well, I understand... except having it that way seems to make the whole "access" tab kind of pointless.

The implementation might not be "buggy", but it seems like the logic might be.

If I have the "view" unchecked for the given group under "configuration", it does NOT show in the Hikashop menu, but it DOES show in the Joomla menu. So - is that "hidden"? No, it isn't. (Although at least the "manage" option seems to take the editing options away, but still the data is accessible.)

Per my (possibly incomplete) understanding, you can choose not to have any sub-menus for the Joomla menu for a component (Tienda has it that way) - if the display can't be dynamic, maybe the sub-menu should be eliminated, and the Hikashop menu should "take care of business".

BTW, for now, I went and hid the sub-menu using CSS on the Admin side template, but this is an "un-elegant" "hack" and doesn't make the access setting "work". (Not to mention, the limited user could look at the page source and find the link in it and go to the paqe using that, if they had any kind of web "savvy".)

What's your thoughts on this?

Zoltan

Please Log in or Create an account to join the conversation.

  • Posts: 82863
  • Thank you received: 13372
  • MODERATOR
12 years 8 months ago #41379

You must be using HikaShop on Joomla 2.5 because the library changed. We found out that the access check is not working properly on views of the backend with the current release.
The fix which will be included in next version of HikaShop is to add the code:

function authorise($task){
		return $this->authorize($task);
	}
before the code:
function authorize($task){
in the file administrator/components/com_hikashop/helpers/helper.php
With that, the access to the view itself won't be allowed and thus hiding the menu in CSS is not really a problem.

Please Log in or Create an account to join the conversation.

  • Posts: 34
  • Thank you received: 0
12 years 8 months ago #41380

Hi Nicolas,

I added the piece of code, and removed the CSS section to see what would happen, and the admin menu is back in "full bloom", i.e. config and all...

Maybe I did something wrong?

Zoltan

Please Log in or Create an account to join the conversation.

  • Posts: 34
  • Thank you received: 0
12 years 8 months ago #41381

I meant to say but forgot: yes, I'm on J2.5

Zoltan

Please Log in or Create an account to join the conversation.

  • Posts: 82863
  • Thank you received: 13372
  • MODERATOR
12 years 8 months ago #41382

Did you click on the menu ? Can you see the view when you click on it ?
That modification is not to handle the joomla menu items but to forbid the access to the view when the access is not granted.

The following user(s) said Thank You: coolcatcreative

Please Log in or Create an account to join the conversation.

  • Posts: 34
  • Thank you received: 0
12 years 8 months ago #41385

Now I understand...

And yes, it works now, thanks!

Zoltan

Please Log in or Create an account to join the conversation.

Time to create page: 0.070 seconds
Powered by Kunena Forum