Page 1 of 1

User merchandise can't access to 'Product'

Posted: Sun Apr 07, 2013 2:25 pm
by nathan90
Hi all,

in my admin installation - version 2.2.x - after merchandise's login, when I click on Product, there is the error :
(With 'Product Options' its the same)

"[ WARN] 19:52:08 CompatibleGWTSecuredRPCServiceExporter - org.broadleafcommerce.common.exception.ServiceException: Security Check Failed for entity operation: INSPECT (org.broadleafcommerce.common.locale.domain.Locale)"

After logging in with admin user I see for merchandise the role : 'ROLE_MERCHANDISE_MANAGER' with PERMISSION_OTHER_DEFAULT , PERMISSION_ALL_CATEGORY and especially PERMISSION_ALL_PRODUCT .

Is there a problem in my load_admin_security ?

thanks .

Re: User merchandise can't access to 'Product'

Posted: Fri Apr 12, 2013 4:39 pm
by jefffischer
Are you using the i18n module? The documentation for that module probably needs to be more complete to include mention of any security adjustments required.

Regardless, yes, it sounds like you need to add security for the additional locale domain associated with product (presumably from the i18n module). If you're using the demosite as the basis for your project, take a look at load_admin_security.sql. You'll need to add lines to account for locale for product permissions (see BLC_ADMIN_PERMISSION_ENTITY).