CatalogV2 User Roles not Applying

Known issues

ID: 489297

No Fix

Published on 2/25/2022

•

Last update on 2/16/2024

Summary

Currently, the user role UI for the CatalogV2 application is not correctly applying the user permissions of access control when an user is utilizing the UI to create/read/update products.

Simulation

Access the license manager UI for a store that has the CatalogV2 installed (/admin/license-manager/#/role-details)
Set a read-only user role

${"base64":" ","img":{"width":410,"height":391,"type":"png","mime":"image/png","wUnits":"px","hUnits":"px","length":16109,"url":"https://raw.githubusercontent.com/vtexdocs/help-center-content/refs/heads/main/docs/en/known-issues/Catalog/catalogv2-user-roles-not-applying_1.png"}}$

With these rules set, log in with the related user
Try to update a product, you will be able to, despite the read-only credentials.

Workaround

Use the GraphQL APIs of the catalog v2 to manage these permissions.