Permission issue - cannot edit custom attributes

Hi,
I defined a few attributes that were not defined out of the box for a product.
When defining a user that is not admin, this user cannot edit these custom attributes (he can edit the out of the box attributes after I define in the Role page that edit is allowed)

Any idea?
Is there another place in the Role where this needs to be allowed?

@udimargolin, make sure that you set the permissions for the Attribute and Product Attribute Value on the Roles page.

Did that - opened edit to all and still custom attributes can only be edited by admin

Also try set permissions for Attribute Group.

Thanks but that did not help as well.
What I see now is that if a user (not admin) creates a new product, he cannot update the new attributes himself as well.
I saw there is an error that shows up for a second and then disappears. Found this log (espo-2020-02-03.log). Maybe will help to understand:

[2020-02-03 12:48:50] Espo.ERROR: Display Error: , Code: 403 URL: /dscatalog/api/v1/ProductAttributeValue/5e381683adf1201c1 [] []
[2020-02-03 12:48:50] Espo.ERROR: API [PUT]:/api/v1/:controller/:id, Params:Array ( [controller] => Product [id] => 5e381683a283e4541 ) , InputData: {} - No changes for updating [] []
[2020-02-03 12:48:50] Espo.ERROR: Display Error: No changes for updating, Code: 304 URL: /dscatalog/api/v1/Product/5e381683a283e4541 [] []
[2020-02-03 13:39:30] Espo.ERROR: API [PUT]:/api/v1/:controller/:id, Params:Array ( [controller] => ProductAttributeValue [id] => 5e31545c7149eae7b ) , InputData: {“value”:“

yy

”} - [] []
[2020-02-03 13:39:30] Espo.ERROR: Display Error: , Code: 403 URL: /dscatalog/api/v1/ProductAttributeValue/5e31545c7149eae7b [] []
[2020-02-03 13:39:30] Espo.ERROR: API [PUT]:/api/v1/:controller/:id, Params:Array ( [controller] => Product [id] => 5e30551c23f284830 ) , InputData: {} - No changes for updating [] []
[2020-02-03 13:39:30] Espo.ERROR: Display Error: No changes for updating, Code: 304 URL: /dscatalog/api/v1/Product/5e30551c23f284830 [] []
[2020-02-03 13:40:07] Espo.ERROR: API [PUT]:/api/v1/:controller/:id, Params:Array ( [controller] => ProductAttributeValue [id] => 5e381683adf1201c1 ) , InputData: {“value”:“

zzz

”} - [] []
[2020-02-03 13:40:07] Espo.ERROR: Display Error: , Code: 403 URL: /dscatalog/api/v1/ProductAttributeValue/5e381683adf1201c1 [] []
[2020-02-03 13:40:25] Espo.ERROR: API [PUT]:/api/v1/:controller/:id, Params:Array ( [controller] => ProductAttributeValue [id] => 5e381683adf1201c1 ) , InputData: {“value”:“

sss

”} - [] []
[2020-02-03 13:40:25] Espo.ERROR: Display Error: , Code: 403 URL: /dscatalog/api/v1/ProductAttributeValue/5e381683adf1201c1 [] []
[2020-02-03 13:40:25] Espo.ERROR: API [PUT]:/api/v1/:controller/:id, Params:Array ( [controller] => Product [id] => 5e381683a283e4541 ) , InputData: {} - No changes for updating [] []
[2020-02-03 13:40:25] Espo.ERROR: Display Error: No changes for updating, Code: 304 URL: /dscatalog/api/v1/Product/5e381683a283e4541 [] []
[2020-02-03 13:40:52] Espo.ERROR: API [PUT]:/api/v1/:controller/:id, Params:Array ( [controller] => ProductAttributeValue [id] => 5e381683adf1201c1 ) , InputData: {“value”:“

ssss

”} - [] []
[2020-02-03 13:40:52] Espo.ERROR: Display Error: , Code: 403 URL: /dscatalog/api/v1/ProductAttributeValue/5e381683adf1201c1 [] []
[2020-02-03 13:40:52] Espo.ERROR: API [PUT]:/api/v1/:controller/:id, Params:Array ( [controller] => Product [id] => 5e381683a283e4541 ) , InputData: {} - No changes for updating [] []
[2020-02-03 13:40:52] Espo.ERROR: Display Error: No changes for updating, Code: 304 URL: /dscatalog/api/v1/Product/5e381683a283e4541 [] []

Do you can send your permissions settings?

If you mean the Role settings - sure - here they are (I changed the name ‘Product’ to ‘Domain Service’ in the Label Manager:

We tested editing of the attributes with the given Roles settings and didn’t find any errors. Could you, please, give us access to your project for testing?

Hi,

Thanks for testing this. My installation is inside the company network and accessible only with a VPN.
Could the problem be that I changed the labels throughout the installation from ‘Product’ to ‘Domain Service’?
If there are any specific tests you’d like me to do, I can do and send the results/screenshots.

-Udi

Changing the label cannot cause this error. When you edited attributes of the ‘Channel’ scope, did you try to change the channel list? Also try adding read permission to the ‘Channel’ entity and clear cache. We are also providing you with our role settings that we used for testing.

Hi,

I think that now the permission issue works. Not sure if I changed anything or it just took time for the permission engine to get updated.
Now when I edit an attribute by a user who is not admin, the edits are saved.

Thanks for your help,
-Udi