Admin Controller _isAllowed method is missing

[zolthan]

Since one of the last updates of Magento every admin controller needs an _isAllowed method to check the ACL. Neither these methods nor an ACL definition is contained in the module. So no user without full admin privileges is able to create an order from OroCRM.

For gateway controller

   protected function _isAllowed()
    {
        return Mage::getSingleton('admin/session')->isAllowed('oro/gateway');
    }

And sales controller

   protected function _isAllowed()
    {
        return Mage::getSingleton('admin/session')->isAllowed('oro/sales');
    }

And the corresponding entries in the adminhtml.xml

<?xml version="1.0" encoding="UTF-8"?>
<config>
    <acl>
        <resources>
            <admin>
                <children>
                    <system>
                        <children>
                            <config>
                                <children>
                                    <oro translate="title" module="oro_api">
                                        <title>Oro Section</title>
                                        <sort_order>50</sort_order>
                                    </oro>
                                </children>
                            </config>
                        </children>
                    </system>
                    <oro translate="title" module="oro_api">
                        <title>Oro Bridge</title>
                        <children>
                            <gateway translate="title" module="oro_api">
                                <title>Gateway</title>
                                <sort_order>10</sort_order>
                            </gateway>
                            <sales translate="title" module="oro_api">
                                <title>Sales</title>
                                <sort_order>20</sort_order>
                            </sales>
                        </children>
                    </oro>
                </children>
            </admin>
        </resources>
    </acl>
</config>

I hope the fix will be implemented soon.

Best, Sebastian

[mkudelya]

Hi @zolthan

Thanks you for your suggestion to fix. Bug has been created.

[vbyndych]

Internal ID: CRM-8510