Forums / Setup & design / Hiding path in shop templates

Hiding path in shop templates

Author Message

Richard Lundberg

Monday 16 August 2010 4:32:08 pm

I want to turn off the path display in certain shop views, in particular customerorderview and orderview in order to prevent a customer having access to the entire order list of all customers.

(I have enabled shop/adminstrate rights to customers so they can review their orders, but this gives the access to view all orders!!)

I have added

{set scope=global persistent_variable=hash('left_menu', false(),
'extra_menu', false(),
'show_path', false())}

to the top of the customerorderview.tpl template as this seems to be the method via ezpagedata() used by the frontpage template to turn of the path, but it does not seem to work for the shop template.

This is on 4.3

Any ideas?

www.peakm3.com

Peter Keung

Friday 27 August 2010 9:42:56 am

Have you tried ezpagedata_set?

However, even if you disable the link to the full order list, people can still access the URL directly. And even without "administrate" rights, it's easy to manipulate the shop/orderview/<order_number> URL to view other orders. Some workarounds for this privacy issue I've used in the past include building separate views or creating override templates with hack-ish permission checking.

http://www.mugo.ca
Mugo Web, eZ Partner in Vancouver, Canada

eZ debug

Timing: Jan 18 2025 04:29:57
Script start
Timing: Jan 18 2025 04:29:57
Module start 'content'
Timing: Jan 18 2025 04:29:57
Module end 'content'
Timing: Jan 18 2025 04:29:57
Script end

Main resources:

Total runtime0.4115 sec
Peak memory usage2,048.0000 KB
Database Queries141

Timing points:

CheckpointStart (sec)Duration (sec)Memory at start (KB)Memory used (KB)
Script start 0.00000.0077 587.7109180.8359
Module start 'content' 0.00770.0057 768.546993.8672
Module end 'content' 0.01330.3982 862.4141522.8047
Script end 0.4115  1,385.2188 

Time accumulators:

 Accumulator Duration (sec) Duration (%) Count Average (sec)
Ini load
Load cache0.00390.9442200.0002
Check MTime0.00140.3520200.0001
Mysql Total
Database connection0.00090.215810.0009
Mysqli_queries0.356586.63541410.0025
Looping result0.00190.47161390.0000
Template Total0.397796.610.3977
Template load0.00100.240810.0010
Template processing0.396796.404010.3967
Override
Cache load0.00070.167010.0007
Sytem overhead
Fetch class attribute can translate value0.00110.274510.0011
XML
Image XML parsing0.00030.075410.0003
General
dbfile0.00170.4076200.0001
String conversion0.00000.001530.0000
Note: percentages do not add up to 100% because some accumulators overlap

CSS/JS files loaded with "ezjscPacker" during request:

CacheTypePacklevelSourceFiles
CSS0extension/community/design/community/stylesheets/ext/jquery.autocomplete.css
extension/community_design/design/suncana/stylesheets/scrollbars.css
extension/community_design/design/suncana/stylesheets/tabs.css
extension/community_design/design/suncana/stylesheets/roadmap.css
extension/community_design/design/suncana/stylesheets/content.css
extension/community_design/design/suncana/stylesheets/star-rating.css
extension/community_design/design/suncana/stylesheets/syntax_and_custom_tags.css
extension/community_design/design/suncana/stylesheets/buttons.css
extension/community_design/design/suncana/stylesheets/tweetbox.css
extension/community_design/design/suncana/stylesheets/jquery.fancybox-1.3.4.css
extension/bcsmoothgallery/design/standard/stylesheets/magnific-popup.css
extension/sevenx/design/simple/stylesheets/star_rating.css
extension/sevenx/design/simple/stylesheets/libs/fontawesome/css/all.min.css
extension/sevenx/design/simple/stylesheets/main.v02.css
extension/sevenx/design/simple/stylesheets/main.v02.res.css
JS0extension/ezjscore/design/standard/lib/yui/3.17.2/build/yui/yui-min.js
extension/ezjscore/design/standard/javascript/jquery-3.7.0.min.js
extension/community_design/design/suncana/javascript/jquery.ui.core.min.js
extension/community_design/design/suncana/javascript/jquery.ui.widget.min.js
extension/community_design/design/suncana/javascript/jquery.easing.1.3.js
extension/community_design/design/suncana/javascript/jquery.ui.tabs.js
extension/community_design/design/suncana/javascript/jquery.hoverIntent.min.js
extension/community_design/design/suncana/javascript/jquery.popmenu.js
extension/community_design/design/suncana/javascript/jScrollPane.js
extension/community_design/design/suncana/javascript/jquery.mousewheel.js
extension/community_design/design/suncana/javascript/jquery.cycle.all.js
extension/sevenx/design/simple/javascript/jquery.scrollTo.js
extension/community_design/design/suncana/javascript/jquery.cookie.js
extension/community_design/design/suncana/javascript/ezstarrating_jquery.js
extension/community_design/design/suncana/javascript/jquery.initboxes.js
extension/community_design/design/suncana/javascript/app.js
extension/community_design/design/suncana/javascript/twitterwidget.js
extension/community_design/design/suncana/javascript/community.js
extension/community_design/design/suncana/javascript/roadmap.js
extension/community_design/design/suncana/javascript/ez.js
extension/community_design/design/suncana/javascript/ezshareevents.js
extension/sevenx/design/simple/javascript/main.js

Templates used to render the page:

UsageRequested templateTemplateTemplate loadedEditOverride
1pagelayout.tpl<No override>extension/sevenx/design/simple/templates/pagelayout.tplEdit templateOverride template
 Number of times templates used: 1
 Number of unique templates used: 1

Time used to render debug report: 0.0001 secs