ACSD-56858: The role permissions for a restricted company admin in the B2B environment…
The role permissions for a restricted company admin in the B2B environment are inaccurately displayed. Quality patch ACSD-56858 for magento/module-company applies to Magento Open Source and Adobe Commerce 2.4.2 to 2.4.6-p7.
- Categories
- B2B
- Components
- magento/module-company
- Origin
- adobe-commerce-support
- Since QPT
- 1.1.47
Issue
The role permissions for a restricted company admin in the B2B environment are inaccurately displayed.
Steps to reproduce
1. Begin by setting up a company, adding a company admin and company users. 1. Log in as the company admin at the storefront and create various roles for different users. 1. Assign these roles as needed, such as limiting access for some tasks while allowing full access for others. 1. Assign these roles with full access to a user other than the company admin. 1. Log in to a non-company admin user, for e.g. a company_manager. 1. Navigate to Roles and permission and edit the role. 1. Notice that the permissions displayed do not match the permissions set in the company's database for that role ID.
Adobe's page lists 2.4.2 - 2.4.6-p4 as compatible; the versions below are resolved from the current QPT constraints and are the ones the tool will offer.
Adobe scheduled the permanent fix for 2.4.7.
Install
Install the Quality Patches Tool with composer require magento/quality-patches, apply the prerequisites listed for all files applicable to your distribution and version first, then run vendor/bin/magento-patches apply ACSD-56858. On Cloud, add ACSD-56858 under stage.build.QUALITY_PATCHES in .magento.env.yaml.
For cweagans/composer-patches, choose a compatible version below and download the bundle. Copy its ACSD-56858/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Bundle prerequisites the same way and list them first. Paths are relative to each package root, using the default -p1 level. Prefer local files when configuring composer-patches; a remote URL can change.
Patch files and compatible versions
magento/magento2-b2b-base >=1.3.1 <1.3.6
- Magento Open Source
- —
- Adobe Commerce
- 2.4.6-p7, 2.4.6-p6, 2.4.6-p5, 2.4.6-p4, 2.4.6-p3, 2.4.6-p2, 2.4.6-p1, 2.4.6, 2.4.5-p17, 2.4.5-p16, 2.4.5-p15, 2.4.5-p14, 2.4.5-p13, 2.4.5-p12, 2.4.5-p11, 2.4.5-p10, 2.4.5-p9, 2.4.5-p8, 2.4.5-p7, 2.4.5-p6, 2.4.5-p5, 2.4.5-p4, 2.4.5-p3, 2.4.5-p2, 2.4.5-p1, 2.4.5, 2.4.4-p18, 2.4.4-p17, 2.4.4-p16, 2.4.4-p15, 2.4.4-p14, 2.4.4-p13, 2.4.4-p12, 2.4.4-p11, 2.4.4-p10, 2.4.4-p9, 2.4.4-p8, 2.4.4-p7, 2.4.4-p6, 2.4.4-p5, 2.4.4-p4, 2.4.4-p3, 2.4.4-p2, 2.4.4-p1, 2.4.4, 2.4.3-p3, 2.4.3-p2, 2.4.3-p1, 2.4.3, 2.4.2-p2, 2.4.2-p1, 2.4.2
- vendor/magento/module-company/Model/Authorization/PermissionProvider.php
