Unable to edit order in inventory even with Inventory Administrator role. The error seen is “You do not have the necessary permission to update this order”
Suggestion:
Access and privileges for material libraries are controlled by three parts security policy, group associations, and user role privileges. Please ensure that for:
- The group associations: the material library type has been associated to the group
- The user roles: the option to “Edit Materials” is checked for the “Inventory Admin” role name, if the users belong to a different role, it must be checked for that role (If any changes are made log out and back in before testing)
- The security policy: "entity. write" has been granted in the material library rules. Also in order to edit other users orders in inventory “World read” policy should be set to entity.write for administrators.
The world read policy overrides all the other policies and will by default grant access to all users for all resources. Therefore, we can restrict the access to admins only by giving "Administrators" in the user group instead of "All User" and overcome the issue.
RULE "World Write"
IF
user group in "Administrators"
THEN
grant "entity.write"
By giving "entity.write" it gives edit permission to Admin to edit the orders placed in inventory (but to avoid tweaking the orders already created, this policy is generally set to "entity.read" only where you can only view others order and edit your own orders)
Comments
0 comments
Article is closed for comments.