Anybody can vote, despite access level

-- url of the page with the problem -- : www.sikringspartner.no/brannslukking
-- HikaShop version -- : 2.6.0
-- Joomla version -- : 3.4.8
-- PHP version -- : 5.3.29
-- Browser(s) name and version -- : Chrome & Mozilla Firefox

I chose in the configuration:
"Choose which module you want to enable": Vote & Comment
"Choose the access level for votes or comments": Registered

And still anybody can vote, registered or not....

Did I miss any further configuration regarding voting?

But you have to be registered to comment... So that part workes...

I only want registered users to be able to vote...

And I set the configuration to be:
"Choose which module you want to enable": Vote & Comment
and
"Choose the access level for votes or comments": Registered

And it doesn't work... Anybody can vote...

I thought voting was giving out the stars, not commenting....

We disabled comments if you're not logged in....

But we don't want just anybody to be able to click on the stars (vote)... We only want logged in customers to be able to do so...

www.sikringspartner.no/brannslukking
and
www.sikringspartner.no/brannslukking/pro...-110-slukkeskum-4-pk

Look next to the price, not at the bottom of the page..

(PS. We have upgraded to Essential, if that has anything to say... )

Hi,

I just went on your website and as I was not logged in, I was not able to vote or comment.
So it seems that you have set it up as desired.

Please try again...

Now the settings are:

"Choose which module you want to enable": Vote & Comment
and
"Choose the access level for votes or comments": Registered

Hi,

There was indeed an issue, please edit the view "vote / mini" and add the code:

// Checks on vote access
$voteAccess = $config->get('access_vote','public');
$user = (!is_null(hikashop_loadUser()))?hikashop_loadUser():false;
$hasBought = false;
if($voteAccess == 'buyed' && $user){
	$voteClass = hikashop_get('class.vote');
	$hasBought = $voteClass->hasBought($row->vote_ref_id, $user);
}
$canVote = $voteAccess == 'public' || ($voteAccess == 'registered' && $user) || ($voteAccess == 'buyed' && $hasBought);

if($row->vote_enabled != 1)
	return;

if($config->get('enable_status_vote', 'vote') != 'both') {

if($config->get('enable_status_vote', 'vote') != 'both' &&  $canVote) {

Thank you! Now it works!

But it seems we still have an issue with the voting system. Because when we delete the votes (in admin: Customers > Vote) they are deleted from that list, but not from the product it self. So it's still visible to all visitors...

Du you have a solution for that too?

Hi,

I just tried to reproduce that issue on my local, and indeed when deleting a vote directly the value is not removed on the product side. But this has been already fixed for the next release of HikaShop, as we changed many things in the way the votes are managed.

So please wait until the next release which should arrive soon

Thank you!

Before this release, for the current votes you can unpublish them before deleting them.
That way everything will be working as expected.

Any eta when it will be released?

Hi,

We can't give a date for now, but should be in January