search

mercurjs / mercur

JavaScript Open Source
Multi-Vendor Marketplace Accelerator build on top of Medusa.js. Mercur simplifies the path to your own customized, multi-vendor marketplace.
https://mercurjs.com
MIT License
153 stars 15 forks source link

Dont show users of admins and other vendors #6

Open HadiSDev opened 3 months ago

HadiSDev commented 3 months ago

In the Vendor Admin Panel under users we don't want to show any other user other than the vendor team: image

HadiSDev commented 3 months ago

I also realized that the role is wrong. It is set to Admin. Big security risk

vholik commented 1 week ago

Role admin only applies to the store it does not applies for the whole marketplace. There is is_admin column in users table that differentiates admins from vendors.