Magento have released a important security patch called SUPEE-6285. We recommend you apply this patch right away which is available directly from Magento.

We’ve analyzed the impact of this patch against our extensions and some will require updates in order to work correctly when accessing their admin menus. There’s absolutely no impact to their functionality on the front end or around rating.

What Should You Do Next?

If you’re using any of the below extensions, you will need to either contact us for the latest version or apply the fix yourself. The process is outlined below for each extension.

MatrixRate

You should download the latest version and install it on your site.

CSV Based Extensions

(ProductMatrix, Premium MatrixRate, Shipping Override, Handling Fees Matrix)

Some users are reporting issues exporting CSV files after patching their site. This particularly affects Magento CE1.7/EE1.12 users.

Find this file on your servers file system: app/code/community/Webshopapps/Wsacommon/controllers/System/ConfigController.php

Add this function to the bottom of the file before the last bracket:

protected function _isAllowed()
{
    return true;
}

Dimensional Shipping

Find this file on your servers file system: app/code/community/Webshopapps/Boxmenu/controllers/Adminhtml/BoxmenuController.php

Add this function to the bottom of the file before the last bracket:

protected function _isAllowed()
{
    return Mage::getSingleton('admin/session')->isAllowed('catalog/boxmenu');
}

DropShip/Ship Manager

Find this file on your servers file system: app/code/community/Webshopapps/Dropcommon/controllers/Adminhtml/DropshipController.php

Add this function to the bottom of the file before the last bracket:

protected function _isAllowed()
{
    return Mage::getSingleton('admin/session')->isAllowed('dropcommon');
}

Find this file on your servers file system: app/code/community/Webshopapps/Dropcommon/controllers/Adminhtml/ShipmethodsController.php

Add this function to the bottom of the file before the last bracket:

protected function _isAllowed()
{
    return Mage::getSingleton('admin/session')->isAllowed('dropcommon');
}

Shipping Insurance

Find this file on your servers file system: app/code/community/Webshopapps/Insurance/controllers/Adminhtml/InsuranceController.php

Add this function to the bottom of the file before the last bracket:

protected function _isAllowed()
{
    return Mage::getSingleton('admin/session')->isAllowed('catalog/insurance');
}

Store Pickup

Find this file on your servers file system: app/code/community/Webshopapps/Wsastorepickup/controllers/Adminhtml/WsastorepickupController.php

Add this function to the bottom of the file before the last bracket:

protected function _isAllowed()
{
    return Mage::getSingleton('admin/session')
                                 ->isAllowed('catalog/webshopapps/locations');
}

Shipping Calendar

Find this file on your servers file system: app/code/community/Webshopapps/Timegrid/controllers/Adminhtml/TimegridController.php

Add this function to the bottom of the file before the last bracket:

protected function _isAllowed()
{
    return Mage::getSingleton('admin/session')->isAllowed('catalog/timegrid');
}

Logger

WebShopApps Logger currently uses the permissions of “Notifications” which can be found under “System->Notification” in the Roles Resources tab of user permissions in Magento.

The latest version moves WebShopApps logger into its own permissions area. If you’d like the latest version, please contact us and we can send it over to you as part of your extension update.

This entry was posted on Friday, July 10th, 2015 at 5:01 pm and is filed under Shipping in Magento. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.