Questions tagged [acl]

Questions about using the access control list (ACL) to manage admin user roles and permissions

Filter by
Sorted by
Tagged with
85
votes
3answers
25k views

Access Denied errors after installing SUPEE-6285

After installing the SUPEE-6285 patch on our Magento 1.7.0.2 store the system is showing an "Access Denied" error when attempting to access all custom modules for users who have selective permissions (...
27
votes
4answers
32k views

How to avoid 404 error on new extension installation

It is a very common error that shows in Magento when you install a new extension with system.xml config: When you go to the System->Configuration->Extension tab, a 404 error is shown. You need ...
11
votes
1answer
12k views

Custom module: Access denied (ACL Problem)

I created a module, and it works perfectly; however, I hit a wall. When I'm logged in as admin, everthing is good. I added this in the acl: <?xml version="1.0"?> <config> <menu> ...
11
votes
1answer
9k views

Magento 2 System Configuration for Module issue

I visited many sites for find solution of this issue. But after creating system.xml and acl.xml Magento give me a report generated error. Error a:4:{i:0;s:140:"Notice: Undefined index: id in /...
10
votes
4answers
14k views

Hide Attributes and Other Fields in Product Edit Backend

To make editing of products (and maybe also categories) for the shop owner easier, we would like to hide some unnecessary tabs and fields from some users in the admin backend. This means: Hiding some ...
10
votes
2answers
209 views

Test configuration pages with AbstractBackendController: testAclNoAccess fails

I'm writing an integration test for a configuration section and encountered the following failure from the default test cases: My\Module\ConfigTest::testAclNoAccess Failed asserting that 302 is ...
8
votes
2answers
10k views

How to add acl in custom module in magento

I created custom module in magento. I created that menu under customer menu. I need to add acl for custom module. I need to know that how to create acl in custom module i m giving here my config.xml.....
8
votes
2answers
969 views

ACL Role Resource Default

Let's say we add some new resources to the ACL like so: <acl> <resources> <admin> <children> <catalog> <...
6
votes
1answer
2k views

How does Magento2 Access Control List work?

I have been looking over the internet for an exposition of access control lists in Magento2 and will appreciate any insight on this.
5
votes
2answers
5k views

Admin roles role_type table column

In the admin_role table there is a column role_type that can have 2 values: 'G' - Mage_Admin_Model_Acl::ROLE_TYPE_GROUP 'U' - Mage_Admin_Model_Acl::ROLE_TYPE_USER By their names I jump do the ...
5
votes
1answer
816 views

Restrict admin user permissions per field in Magento

Is it possible to restrict an admin user on a field basis? For example I would like some users to edit stock of a product and the short description however I don't want them to be able to change ...
5
votes
1answer
3k views

Is it necessary to override _isAllowed in your Admin controller?

The _isAllowed method is where you, as a Admin Panel programmer, should place your ACL checks. As you can see, by default, this method returns true. That means if you don’t define your own ...
5
votes
1answer
2k views

Magento 2 : User Role and Permission Issue (ACL Issue)

In my magento2, I have created one user role with custom permission in which I give permission only for "Shipping Methods" to user. When I login with this user, it also show me other custom extension ...
5
votes
3answers
2k views

Magento 2.1.0 Roles Resource Tree not showing

in the backend, going to system->roles, adding a new role and setting it to custom permissions, the resource tree is empty. Stepping through the code I can see, in module_user/Block/Role/Tab/Edit.php ...
4
votes
3answers
2k views

Magento 2 admin user role not displaying anything

I have created a custom module, everything is working fine, but when i take the admin user roles it is displaying nothing. My acl.xml file <?xml version="1.0"?> <config xmlns:xsi="http://...
4
votes
1answer
330 views

Magento ACL recursive permissions?

I have a module that adds a new menu in the backend. I have the acls defined and they work: <acl> <resources> <admin> <children> <...
4
votes
1answer
173 views

Can I add a user to more than one role?

For instance, say I have the role "category manager" and the role "product manager", but then there are some users which need to have access to both categories and products. Ideally, I would like to ...
4
votes
1answer
37 views

issue while adding recipie

I have created a user . I give a user role and give resources to add recipies . it is working for admin user . but it is not working for non admins . screenshots will help you understand my question. ...
4
votes
1answer
401 views

Could not create an acl object: Invalid XML

I'm a newbie learning and got this message when installing a theme and trying to access to admin, would someone mind giving me a hand? I got this error: 1 exception(s): Exception #0 (LogicException)...
4
votes
0answers
28 views

How to configure REST without edit the controls manually?

Hello I am developing an extension for magento that adds a new call to the REST API. This call must be accessible to everyone so by now the guest user must be configured manually to allow him use this ...
4
votes
1answer
2k views

Restrict administrator to one store view

I have installed and configured a Magento Community edition v1.8 according to a few requirements. Part of the requirements is the setup of a few stores. For completion though, it is necessary to ...
3
votes
1answer
7k views

Magento 2 System Configuration Custom setting for Module not working

I have followed below link and created both "system.xml" and "acl.xml" at their respective locations. https://stackoverflow.com/questions/32614392/magento-2-system-xml-in-custom-module But instead ...
3
votes
1answer
2k views

What /etc/acl.xml file is used for in Magento 2.0.X

I see that most(if not all) of the Magento core modules have a acl.xml file placed in magento-module/etc/ I could not find any documentation on this, so basically I want to know, what is this ...
3
votes
2answers
713 views

How to disable or hide the core ACL resources in Magento 2

How to disable or hide the core module ACL resources in magento 2 with the custom module. I have tried the following syntax and it does not work: <resource id="Magento_Backend::content" remove="...
3
votes
3answers
538 views

Custom REST API endpoint - Consumer is not authorized to access %resources - Magento_Indexer::Indexer

I'm trying to expose the getLatestUpdated() method of the Indexer class through the REST API. The endpoint is getting an auth token and all that - I can use protected endpoints no problem. What ...
3
votes
1answer
386 views

How to translate title attribute in acl.xml

I have this code in acl.xml: <resource id="Magento_Paypal::use" title="Place Order Using Billing Agreements" translate="title" sortOrder="15" /> and I already added this string in ar_SA.csv ...
3
votes
1answer
4k views

Custom module role permission. How to add acl

I need to be able to control my custom module's role permission and I can see I have to add acl in my XML. I have tried to add it in config.xml and also made an adminhtml.xml in the same location. ...
3
votes
2answers
2k views

how to get admin user access level in magento?

Is there a way to know the access level of the current logged in user to see if the user is granted with "all" or "customized" access role? i can get the user role data but i can't seem to understand/...
3
votes
3answers
2k views

Magento 2: Checking an Admin User's Access Level

In Magento 2, you can create access control rules for admin users at System -> User Roles As a backend Magento programmer, how can you check which rules the currently logged in admin user has ...
3
votes
1answer
251 views

Manage customer newsletter user-roles issue

Clean install of Magento ver. 1.9.2.4 I created a user and created a custom role for this user by going to the roles section. When I've selected the option of "all" in roles it works perfectly. I ...
3
votes
0answers
48 views

Magento 2.3 admin is redirecting to this URl domain/admin/admin/denid/key/**** after admin login

I anonymously added some ACL permissions in Magento 2 and saved. I know that I have configured wrongly in the process of knowing, how it works since then I am unable to access my Magento 2 admin, I am ...
3
votes
0answers
22 views

Hide admin sub menus menus via acl

I am looking to disable menus for certain users present within Stores->Configuration->sales->Checkout Totals Sort Order . I have added their values in acl.xml But it does not work. How to disable or ...
3
votes
1answer
264 views

extending magento ACL

I was tasked with extending Magento ACL functionality and allowing one user to hold more than one role. I have been jumping from blog to blog and file to file for the last week - all I can find says ...
2
votes
3answers
7k views

How to give custom acces permissions for admin users(roles) to an extension magento

I have created a admin user in magento and give certain access permissions, and i have an extension called support ticket, i gave user role access to this extension, when i logged in that particular ...
2
votes
1answer
2k views

Getting Access Denied for module

Issue I have a module that allows users to login as the customer (Spadar_Login). This modules uses user permissions. It works for admin roles and it prevents access to roles without permission. The ...
2
votes
2answers
995 views

Why ACL is not working for new Action

I have create a custom admin action for a custom admin controller and have allow to this action for acl. But till now, ACL is not working Controller: <?php class ...
2
votes
2answers
102 views

Restrict Access to Magento Website

I have set up a second website under the same magento installation which will be used as a pos for a physical store. I want to however restrict access to the website as it is not formatted for public ...
2
votes
1answer
479 views

Give custom module's access to all in Magento 1.9

I have created a custom module for backend in Magento 1.9. This module is applicable to all users and roles. <menu> <videos module="videos"> <title>Video Tutorials</...
2
votes
1answer
994 views

Magento 2.1- ACL Permissions not Working

I have created a user and given all the required roles to access the module. When we logged in with that particular user , we are able to see the module and module items but when we click on any item ...
2
votes
3answers
2k views

Access Denied for Custom Module for specific role

I've created one role and provide rights for my custom module using System->Permissions->Role. When any user from that role logs into system, gets access denied for my custom module. My config.xml ...
2
votes
4answers
589 views

ACL working but checkboxes not selected in role edit form

I have coded a module with 3 features (and 3 menupoints). Then i copied the menu-section and edited it so it is useable as ACL resource. It looks like this (adminhtml.xml): <config> <...
2
votes
2answers
2k views

Magento2: Sub-menu is not appearing in admin

I'm using below code in adminhtml/menu.xml to show menu/sub-menu in admin. I'm able to see menu Lapisbard in admin but sub-menu Store Locations is not visible when I click on menu named Lapisbard. &...
2
votes
1answer
157 views

Third party extensions does not have adminhtml.xml to fix Access Denied errors after installing SUPEE-6285

As posted here, the ACL resource must be find in adminhtml.xml, but in extension I have there is no such. However, the acl is defined in community/3rdparty/extension/etc/config.xml file. In addition, ...
2
votes
1answer
5k views

what is <acl> tag in magento

<acl> <resources> <all> <title>Allow Everything</title> </all> <admin> <...
2
votes
1answer
31 views

ACL doesn't work

I tried to add new checkbox into System -> Permissions -> Roles. I added this xml at the adminxml.xml, but it is doesn't work. Where is my fault ? I want to block Catalog -> Product/...
2
votes
2answers
89 views

Magento 2.1.9 - Custom Module tab not showing

I have followed different posts in order to get the solution and the tab working, but It doesn't show up. I have followed this ones: Custom admin configuration tab not showing Magento CE 2.1 ...
2
votes
1answer
131 views

How to put ACL on customer grid's export to CSV, based on roles?

Trying to put ACL on customer Grid's export to CSV functionality based on user role. Add following fode in my module's adminhtml.xml file acl section <config> <acl> <...
2
votes
1answer
125 views

ACL issue in Magento 1

I have this ACL in my module: <acl> <resources> <admin> <children> <report> <children> ...
2
votes
1answer
364 views

set acl permission for tabs in sales order view

I need to set ACL permission for the tabs under sales order view How can I do that?
2
votes
0answers
34 views

magento2 custom product attribute acl permission how to? [closed]

protected function _isAllowed() { return $this->_authorization->isAllowed('Mageants_AdvancedPermissions::catalog_attributes_attributes'); }