Admin users in cscart able see all cscart notifications without permissions

Bug tracker Confirmed bugs
1

We are using cscart Multi-Vendorv4.18.2 SP1
I have created an admin user. And I have assigned only blog permission to this user via user groups.

  1. But this user can see vendor Notification on the Dashboard. And all store notifications on the right-side corner related to store upgrade and products and admin.
  2. This admin user also able to see the help us to improve multivendor. Which is not good to show employees.
    However, when I click on these options, This shows 403 Access denied message.
    But as a standard case this should not show if I have not given the permission.
    If I have many employee in the company. How can I restrict them to see these areas.

Regards

2

Hi!

Thanks for the report. I have forwarded it to the developers.

3

something similar back in 2022

1 Like