Restricting Users from Signing Up Across Multiple Stores

[unknow76616]

I'm currently working with Aimeos and facing an issue regarding user signups across multiple stores. The requirement is to ensure that a user cannot sign up for multiple stores since there is a single siteid field in user schema.

While I can make the siteid field empty to address the signup issue, this introduces a problem. When administrators navigate to their dashboard's at /admin/{siteCode}/jqadm/search/customer, they can view user data even before the user has completed the signup process.

I'm looking for a solution that prevents users from signing up across multiple stores without compromising the security of user data in the admin dashboard. Any suggestions or insights into how to achieve this balance would be greatly appreciated!

[aimeos]

Just to get it right: Users should be able to buy from all stores but the vendors should not see the users in the Customer panel?

[unknow76616]

Users should be able to buy from all stores

Yes

vendors should not see the users in the Customer panel

Each vendor ( site admins ) should still see his customers ( customers they already sign in / sign up on his store "only" )

[aimeos]

The records in the user table are shared across all stores and there's no property that states that the user has "signed in/up" to the vendor site. You may add another table where you store such information, e.g. the vendor site ID the user should be available for. Then, you can adapt the class for the customer panel of the admin backend to use that information to show the appropriate user records only.

[unknow76616]

What is an easy way to perform an inner join between the Customer and CustomerSide (New Table) here?

If I create the CustomerSite Table:

Code: Select all

return array(
    'table' => array(
        '' => function (\Aimeos\Upscheme\Schema\Table $table) {
            $table->engine = 'InnoDB';
            $table->int('customerid');
            $table->string('siteid');

            $table->index(['label', 'siteid'], ...etc);

            $table->foreign('siteid', .... etc);
        },
    ),
);

In `./src/Admin/JQAdm/Customer/Standard.php`:

Code: Select all

public function search(): ?string {
     ....
    // "What is an easy way to inner join between Customer and CustomerSide (New Table) here?"
    $view->items = $manager->search($search, $this->getDomains(), $total);
     .....
}

[aimeos]

Yes, if you add an "internaldeps" property to the search definition of "id" like here:
https://github.com/aimeos/aimeos-core/b ... rd.php#L30

[unknow76616]

Thanks !