ACSD-68490: Add New Attribute button visible to restricted admin during configurable product creation
The ACSD-68490 patch fixes the issue where Add New Attribute button is visible to a restricted admin during configurable product creation. This patch is available when the Quality Patches Tool (QPT) 1.1.75 is installed. The patch ID is ACSD-68490. Please note that this issue is scheduled to be fixed in Adobe Commerce 2.4.9.
Affected products and versions
The patch is created for Adobe Commerce version:
- Adobe Commerce (all deployment methods) 2.4.6
Compatible with Adobe Commerce versions:
- Adobe Commerce (all deployment methods) 2.4.6 - 2.4.6-p13
magento/quality-patches package to the latest version and check the compatibility on the Quality Patches Tool: Search for patches page. Use the patch ID as a search keyword to locate the patch.Issue
The Add New Attribute button is visible to a restricted admin during configurable product creation.
Steps to reproduce:
- Create an additional website, store, and store view.
- Create an admin role that has access only to the new website and assign all resources.
- Create a restricted admin user and assign the new role to this user.
- Log in to the Admin as the restricted user.
- Create a new configurable product.
Expected results:
The Create New Attribute button is not available to the restricted admin user.
Actual results:
A 404 page is displayed.
Apply the patch
To apply individual patches, use the following links depending on your deployment method:
- Adobe Commerce or Magento Open Source on-premises: Quality Patches Tool > Usage in the Quality Patches Tool guide.
- Adobe Commerce on cloud infrastructure: Upgrades and Patches > Apply Patches in the Commerce on Cloud Infrastructure guide.
Related reading
To learn more about Quality Patches Tool, refer to:
- Quality Patches Tool: A self-service tool for quality patches in the Tools guide.