Access
Each manager has shop assignments. The platform uses these assignments and shop relationships to other object in the system to infer access to data that any particular manager has. For example in order to access PRODUCT object this product has to be assigned to a CATEGORY and that category has to be reachable via SHOP_CATEGORY, thus by knowing what shops a manager has access to we can infer all accessible products.
Some objects (e.g. ATTRIBUTE, BRAND) are system shared objects and thus require a system admin role in order to manipulate the data.
Authorization
Functional Area | Role Required | Notes |
---|---|---|
User Management | ||
View users | ROLE_SMADMIN, ROLE_SMSHOPADMIN | filtered by shop access |
Create/Update/Delete user | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access to at least one shop assigned to user |
Grant/revoke roles | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access to at least one shop assigned to user. ROLE_SMADMIN can be granted/revoked only by another ROLE_SMADMIN |
Update/Reset password | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access to at least one shop assigned to user |
Role management | ROLE_SMADMIN | |
Attribute Management | ||
View attributes | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |
Create/Update/Delete attribute | ROLE_SMADMIN | |
View attribute groups | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |
Create/Update/Delete attribute groups | ROLE_SMADMIN | |
View attribute types | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |
Create/Update/Delete attribute types | ROLE_SMADMIN | |
View product types | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |
Create/Update/Delete product types | ROLE_SMADMIN | |
Shop management | ||
View shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access |
Create shop | ROLE_SMADMIN | Cloud users will have shop created via cloud registration |
Update shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |
View shop currencies | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access |
Update shop currencies | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |
View shop shipping/billing countries | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access |
Update shop shipping/billing countries | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |
View shop urls | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |
Update shop urls | ROLE_SMADMIN | |
Catalog management | ||
View categories | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | filtered by shop access |
Create category | ROLE_SMADMIN | |
Create category for shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop access |
Update category | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop access |
Remove category | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |
Assign/Unassign to shop | ROLE_SMADMIN | Cloud users use "Create category for shop" and "Remove category" |
View products/SKU | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | filtered by shop categories |
Create/Update/Delete product/SKU | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop category access |
View product associations | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop category access |
Create/Update/Delete product associations | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop category access |
Create/Update/Delete SKU price | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop category access |
View Tax configurations | ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |
Create/Update/Delete Tax configurations | ROLE_SMSHOPADMIN | |
View brands | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | |
Create/Update/Delete brands | ROLE_SMADMIN | |
Content management | ||
View content | ROLE_SMADMIN, ROLE_SMCONTENTADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access |
Create content root | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |
Create/Update/Delete content | ROLE_SMADMIN, ROLE_SMCONTENTADMIN | requires shop access |
Marketing management | ||
View prices | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access |
Create/Update/Delete SKU price | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop access |
View promotions | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access |
Create/Update/Delete promotion | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMMARKETINGADMIN | requires shop access |
Shipping preferences | ||
View carriers | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMSHIPPINGADMIN | filtered by shop |
Create carrier | ROLE_SMADMIN | |
Create carrier for shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |
Update/Delete | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMSHIPPINGADMIN | requires shop access |
Assign/Unassign to shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |
View carrier SLA | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMSHIPPINGADMIN | requires carrier shop access |
Create/Update/Delete carrier SLA | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMSHIPPINGADMIN | requires carrier shop access |
Enable payment method for SLA | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMSHIPPINGADMIN | requires carrier shop access |
View locations/state | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN, ROLE_SMCONTENTADMIN | |
Create/Update/Delete location/state | ROLE_SMADMIN | |
Inventory management | ||
View warehouses | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access to warehouse |
Create/Delete warehouse | ROLE_SMADMIN | |
Create warehouse for shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |
Update warehouse | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN | requires shop access to warehouse |
Assign/Unassign warehouse to shop | ROLE_SMADMIN | Cloud users must use "Create warehouse for shop" |
View inventory | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | filtered by shop access to warehouse |
Create/Update/Delete inventory | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN | requires shop access to warehouse |
Customer management | ||
View/Update customer | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access |
View customer address book | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access |
View customer wish list | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access |
Assign/Unassign customer to a shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMMARKETINGADMIN | requires shop access |
Reset customer password | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access |
Manage customer orders/deliveries | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER | requires shop access |
Customer order management | ||
Approve orders SaaS | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMCALLCENTERORDERAPPROVE | requires shop access, and for ROLE_SMCALLCENTERORDERAPPROVE additionally requires ROLE_SMCALLCENTERCUSTOMER |
Confirm offline orders | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMCALLCENTERORDERCONFIRM | requires shop access, and for ROLE_SMCALLCENTERORDERCONFIRM additionally requires ROLE_SMCALLCENTERCUSTOMER |
Progress orders and deliveries | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMCALLCENTER, ROLE_SMCALLCENTERORDERPROCESS | requires shop access, and for ROLE_SMCALLCENTERORDERPROCESS additionally requires ROLE_SMCALLCENTERCUSTOMER |
Reporting | ||
Reports | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMREPORTADMIN | |
System | ||
View/Create/Update/Delete preference | ROLE_SMADMIN | |
Reindexing | ROLE_SMADMIN, ROLE_SMSHOPADMIN, ROLE_SMWAREHOUSEADMIN, ROLE_SMMARKETINGADMIN, ROLE_SMCONTENTADMIN | |
Cache operations | ROLE_SMADMIN, ROLE_SMSHOPADMIN | |
Database operations (SQL) | ROLE_SMADMIN | |
Cluster | ROLE_SMADMIN | |
Payment Gateways configuration (default) | ROLE_SMADMIN | |
Payment Gateways configuration for shop | ROLE_SMADMIN, ROLE_SMSHOPADMIN | requires shop access |