Admin Permissions (ACL)
Category Price adds granular admin permissions so you can give pricing or support users access without full admin rights.
Where To Configure Roles
In Magento Admin go to:
- System > Permissions > User Roles (create/edit a role)
- System > Extensions > Integrations (if you use integration tokens)
The permissions below show up under Pricesystem Categoryprice All in the role resource tree.
Admin Menu (What Maps To What)
| Admin Menu | Required ACL |
|---|---|
Pricesystem > Categoryprice |
MageB2B_PricesystemCategoryprice::all |
Pricesystem > Categoryprice > All Customer Categoryprices |
MageB2B_PricesystemCategoryprice::manage |
Pricesystem > Categoryprice > All Customer Group Categoryprices |
MageB2B_PricesystemCategoryprice::manage_customer_group |
Stores > Configuration > MageB2B > Pricesystem |
MageB2B_PricesystemCategoryprice::config |
The configuration section itself is also gated by the shared MageB2B_PricesystemCore::config resource.
Main ACL Resources
| Permission | What It Controls |
|---|---|
MageB2B_PricesystemCategoryprice::manage |
Customer category-price grid and record screens |
MageB2B_PricesystemCategoryprice::save |
Create/update customer category prices |
MageB2B_PricesystemCategoryprice::delete |
Delete customer category prices |
MageB2B_PricesystemCategoryprice::manage_customer_group |
Customer-group category-price grid and record screens |
MageB2B_PricesystemCategoryprice::save_customer_group |
Create/update customer-group category prices |
MageB2B_PricesystemCategoryprice::delete_customer_group |
Delete customer-group category prices |
MageB2B_PricesystemCategoryprice::config |
Categoryprice configuration section |
Tip: Align ACL With REST API Access
If you use the REST API Add-On (package mageb2b/pricesystem-categoryprice-api), the same resources protect its routes:
- Read and search routes require
manageormanage_customer_group - Create and update routes require
saveorsave_customer_group - Delete routes require
deleteordelete_customer_group
Keep the integration user's permissions minimal. See REST API for installation and the endpoint reference.