search

apigee / apigee-m10n-drupal

Add monetization features to a Drupal developer portal
https://www.drupal.org/project/apigee_m10n
GNU General Public License v2.0
13 stars 13 forks source link

Private products with rate plans shown in "Buy API" page even if no access is configured #431

Closed cen1 closed 7 months ago

cen1 commented 1 year ago

Description

Private products are shown in "Buy API" page when attached to a rate plan even when access is configured to only show public plans.

Apigee Info

Apigee X

Steps to Reproduce

Steps to reproduce the behavior:

  1. Under Configuraiton -> Apigee Edge -> API Products -> API Product Access modify access rights as shown in the screenshot.
Screenshot 2023-04-06 at 16 24 26
  1. Create a private plan without rate plan.
  2. Login as developer and go to "Buy API" page. Private product is not visible, this works as expected.
  3. Create a rate plan in Apigee and attach it to private plan from step 2. Private plan is now suddenly visible in "Buy API" page.

Actual Behavior

Private products with rate plans are displayed even though they shouldn't be.

Expected Behavior

Private products with attached rate plan should not be displayed on the Buy API page if the access control forbids so.

Version Info

epigee_edge/2.0.5

cen1 commented 1 year ago

I also tried setting DRUPAL_RBAC: administrator as product attribute but it still shows up to regular users.

giteshk commented 7 months ago

API Product Access does not work with Monetization. When a user buys a plan, they will have access to create keys, against the products that are a part of the plan.

Please feel free to re-open this ticket if more clarification is needed.