EasyStore Administrator Access / Joomla ACL

I concur, what a great and must have option for ES

Hi Ziaul Kabir,

Thanks for confirming Joomla ACL was the correct approach. I have now successfully created a restricted EasyStore user.

For anyone else trying to do this, the important point is that the configuration is mainly handled through Joomla ACL rather than inside the EasyStore component.

The basic steps I followed were:

1. Create a new Joomla User Group (e.g. Store Manager).

2. Assign the required EasyStore permissions through:
   System → Global Configuration → EasyStore → Permissions

3. Configure the group permissions through:
   System → Global Configuration → Permissions

4. Assign the user to the new group.

5. In my case, I also had to remove the user from the Administrator group.

Joomla ACL permissions are additive, so leaving the user in Administrator will override any restrictions.

Initially the user could see several components. By adjusting the permissions in Global Configuration for each of the components, I was able to hide unnecessary backend areas (e.g. Articles, Banners, Media, SmartSearch) and leave only EasyStore visible.

The final result is a user who can access EasyStore order management without access to Joomla configuration, users, content, or other components.

One additional point that may help other users: the permission named "Access Administration Interface" can be confusing.

It does not control whether a user can log into the Joomla Administrator area. Instead, it controls whether the user can access that specific component from within the Administrator interface.

By setting this permission to Denied for unwanted components, the corresponding component menu items disappear from the user's backend view.

It might be worth adding a worked example to the EasyStore documentation, as users who are unfamiliar with Joomla ACL may not realise that the setup is done mainly through Joomla's permission system rather than EasyStore itself.

I would like to add the following observation:

Joomla ACL successfully allows us to restrict backend access to EasyStore. However, once inside EasyStore, there are still menu items and sections visible that may not be relevant to a particular staff role.

Fine-grained permissions within EasyStore would allow administrators to create purpose-specific roles such as Order Manager, Product Manager, or Store Administrator.

I may have missed something, but so far I have not found a way to achieve this level of restriction.

For example, in our case an Order Manager may need access to Orders but not necessarily Customer management (our site only allows guest checkout) or configuration areas.

That said, I am happy with the current configuration. The ability to hide or restrict options within EasyStore is more of a "nice to have" feature rather than a blocker.

Thanks.