CatalogV2 User Roles not Applying

Catalog

•

ID: 489297

No Fix

Published on2/25/2022

•

Last updated on2/16/2024

1 min read

Summary

Currently, the user role UI for the CatalogV2 application is not correctly applying the user permissions of access control when an user is utilizing the UI to create/read/update products.

Simulation

Access the license manager UI for a store that has the CatalogV2 installed (/admin/license-manager/#/role-details)
Set a read-only user role

${"base64":" ","img":{"width":410,"height":391,"type":"png","mime":"image/png","wUnits":"px","hUnits":"px","length":16109,"url":"https://raw.githubusercontent.com/vtexdocs/known-issues/refs/heads/main/docs/en/known-issues/Catalog/catalogv2-user-roles-not-applying_1.png"}}$

With these rules set, log in with the related user
Try to update a product, you will be able to, despite the read-only credentials.

Workaround

Use the GraphQL APIs of the catalog v2 to manage these permissions.