Trader Information
Back to topOverview
Back to topOn a multi-store Adobe Commerce and Magento Open Source installation, every back-office user who can open the Orders grid sees orders from every website and store view. A brand running three regional storefronts with an outsourced support team has no native way to stop agents reading each other's orders: admin roles govern what a user may do, but not where.
Role Permissions is an extension for Magento Open Source and Adobe Commerce. It limits each admin role to a chosen set of websites and store views, and hides chosen product and category attributes from it. The boundary is enforced on three independent layers – grid collections, mass-action collections, and single-entity controllers that answer 404 – so an out-of-scope record cannot be reached even by guessing its id. Categories, the admin store switcher, the store a write is addressed to, and the report screens are scoped to the same boundary.
Key Features
- Per-role store scope – a Store Scope tab on each admin role, with a checkbox tree of every website and store view.
- Zero-trust default – a new role is restricted until explicitly granted; the Administrator role stays unrestricted.
- Three-layer enforcement – grid filtering, mass-action filtering, and a single-entity 404 gate across Orders, Invoices, Shipments, Credit Memos, Customers and Products.
- Category scope – the category tree, product-form picker, autocomplete, widget chooser and global search show a role's granted category trees only, and category writes outside them are refused.
- Store-context validation – the admin store switcher offers only granted store views, and the store a request is addressed to is checked before the page runs.
- Scoped reports – report screens and the dashboard bestsellers tab cover granted store views only, including with no store filter set.
- Attribute Permissions – hide product and category attributes and whole attribute groups per role, in Deny or Allow mode.
- Server-side enforcement of hidden fields – hidden product attributes are stripped from the save request, not merely hidden in the form, and hiding a required field does not break saving.
- Health-check command – reports each role's scope and exits non-zero on a problem.
- Read API – other modules can honour the same scope.
Compatibility
This extension for Magento Open Source and Adobe Commerce supports 2.4.7 – 2.4.9 on PHP 8.1–8.5. Admin panel only – theme-agnostic, with no storefront output.
Technical Specifications
Back to topSeller profile
Seller contact
Current Version
1.3.0
Adobe Commerce platform compatibility
Magento Open Source: 2.4 (current)
Type
Stable Build
Updated
23 September, 2026
Categories
Extensions, Content & Customizations, Personalization & Experience Management
Supported Browsers
Chrome
Quality Report
Back to topAll tests were conducted on the latest versions of Adobe Commerce that existed for the compatible release lines at the moment of the extension submission. Latest versions of all other software were used, as applicable.
Release Notes
Back to top1.3.0:
- Compatible with Magento Open Source : 2.4
- Stability: Stable Build
-
Description:
Version 1.3.0 extends store scope from the record grids to the rest of the admin panel.
ADDED
* Category scope. The category tree, the product form's category picker, the new-category dialog, autocomplete, the widget chooser and admin global search show only the category trees belonging to a role's granted store views. Categories carry no store column in Magento, so the scope is derived from the root category of each granted store view.
* Category write protection. Creating, saving, moving or deleting a category outside the role's scope is refused, and so is moving or creating a category into one. Categories that appear only so the tree can render are visible but never editable.
* Store switcher filtering. Every admin screen that renders the store switcher offers only the store views the role was granted. Websites and store groups whose store views are all out of scope are not offered at all.
* Store context validation. The store a request is addressed to is checked against the role's grants before the page runs, on categories, products, mass attribute updates, custom variables, system configuration and admin order creation.
* Report scope. The report screens that carry a store switcher report on granted store views only. An empty store filter previously meant all stores; for a restricted role it now means all granted stores. The dashboard bestsellers tab is scoped the same way.
FIXED
* Admin global search no longer discloses out-of-scope order numbers, or the customer names carried in the search results, to a restricted role. Order contents were never exposed and deep links always answered not found; what leaked was the existence of the order, its identifier and the customer name.
* Opening Catalog > Categories without selecting a category now opens the role's own granted root category instead of the default store's root.
* The Ordered Products report no longer fails with a database error for restricted roles.
* Changing a role's grants now takes effect immediate
Support
Back to topThe best place to start if you need help with a specific extension is to contact the developer. All Adobe Commerce developers have both a contact email and a support email listed.
Contact Vendor