Skip to content

[5.x] Improve product permissions#4240

Draft
lukeholder wants to merge 96 commits into5.xfrom
feature/product-permissions
Draft

[5.x] Improve product permissions#4240
lukeholder wants to merge 96 commits into5.xfrom
feature/product-permissions

Conversation

@lukeholder
Copy link
Member

@lukeholder lukeholder commented Feb 26, 2026

Description

  • Product permissions have been separated into "View", "Create", "Save", and "Delete" permissions, just like entries.
  • Added craft\commerce\services\ProductTypes::getViewableProductTypes().
  • Added craft\commerce\services\ProductTypes::getViewableProductTypeIds().
  • Added craft\commerce\services\ProductTypes::getCreatableProductTypeIds().
  • Deprecated craft\commerce\services\ProductTypes::hasPermission(). Use $user->can() directly instead.

nfourtythree and others added 30 commits February 16, 2026 19:34
[ci skip]
[ci skip]
[5.6] Add Product and Variant UI label format options
[5.6] Show validation error for Variants with empty SKUs when saving a product
[5.6] Added `relatedToProducts` and `relatedToVariants` GraphQL element query arguments
…-savable

[5.6] Refactor Product and Variant query editability options
Mitigate cart number enumeration attacks
…ent-indexes

[5.6] Sanitising query input from element index actions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants