Fix ACL Resource "admin/sales/order/actions/use" not found (#4199)

The observer just get's triggered from admin area, so we use some existing ACL rule which seems to be introduced exactly for this case.
OpenMage · Sep 17, 2024 · ccb1f6c · ccb1f6c
1 parent 22c15d7
commit ccb1f6c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/code/core/Mage/Sales/Model/Observer.php b/app/code/core/Mage/Sales/Model/Observer.php
@@ -290,7 +290,7 @@ public function restrictAdminBillingAgreementUsage($observer)
         if (!($methodInstance instanceof Mage_Sales_Model_Payment_Method_Billing_AgreementAbstract)) {
             return;
         }
-        if (!Mage::getSingleton('admin/session')->isAllowed('sales/order/actions/use')) {
+        if (!Mage::getSingleton('admin/session')->isAllowed('sales/billing_agreement/actions/use')) {
             $observer->getEvent()->getResult()->isAvailable = false;
         }
     }