Access Denied errors after installing security patches

Question

i created some user and roles in magento

i logged in with that username and password.

but i am getting message "Access Denied".

it was working before, after we installed the security patches , it happened.

i found solution here : Access Denied errors after installing SUPEE-6285

but i did't understood the line here :

"The only solution is to patch the extensions and add this method to all their admin controllers:" means is i have to add that code in controllers? if so i want to know in which file i need to add...

please explain me what actually i need to solve this

I don't think this is a duplicate as Baby in Magento 2 is seeking clarification on one of the points in the referenced question. — AreDubya, Oct 09 '15 at 18:09

score 1 · Accepted Answer · answered Oct 09 '15 at 10:29

1

You can download updates of your extensions, or you could apply the code yourself. Most likely you have to change the adminhtml.xml in the modules that are not working.

answered Oct 09 '15 at 10:29

Timon de Groot

1,019
1
11
25

there it mentioned we have to add following code :
protected function _isAllowed() { return true; }

i want to know in controllers, in which file i have to edit ?
– Baby in Magento Oct 09 '15 at 10:31
thanks a lot , this is the file i need to edit : app/code/local/extension/controllers/Adminhtml – Baby in Magento Oct 09 '15 at 11:02
1

@BabyinMagento2 did it work? – Timon de Groot Oct 09 '15 at 11:11
yes i followed that link, it worked...... – Baby in Magento Oct 09 '15 at 11:12

score 0 · Answer 2 · edited Apr 13 '17 at 12:54

0

we need to look at extension folder : app/code/local/extension/controllers/Adminhtml and than we have to add the code as in this link : Access Denied errors after installing SUPEE-6285

edited Apr 13 '17 at 12:54

Community

1

answered Oct 09 '15 at 11:04

Baby in Magento

3,167
16
83
221

Access Denied errors after installing security patches

2 Answers2