Restrict admin users to sales channels

About the Extension

The permission system of Shopware 6 only knows permissions per entity and action, that is read, create, update and delete. There is no link to the sales channel. In an installation with several sales channels, every user who may see products sees all products, and every user who may see orders sees the orders of all channels. If you run several tenants, brands or countries in one instance, everyone involved sees the data of everyone else.

This plugin closes that gap. You assign one or more sales channels to a user in the user administration. From then on the user only sees and edits the data of those channels. The restriction is real access control and not a display filter: opening a foreign record directly through the address bar or through the interface of the administration leads nowhere. For a restricted user, a foreign record simply does not exist.

Without a selection nothing changes. A user without an assigned channel keeps working as before, so your shop stays exactly as it was right after the installation.

This is how the individual areas behave:

Products follow their visibility in the sales channel. Variants follow their main product. Products without any visibility assignment stay visible for everyone.

Categories cover the navigation, footer and service category of the channel and everything below them. For the user, the category tree starts right at their own area. They can neither create a category above it nor move anything there.

Customers belong to a channel when they are registered there or have ordered there at least once. This way a visible order never points to a blocked customer account.

Orders follow their sales channel, including line items, deliveries, transactions and documents.

Shopping experiences and landing pages follow their assignment to categories, landing pages or channels of the user.

The dashboard calculates turnover and order figures per sales channel. After logging in, a tenant does not see the total turnover of all channels.

When a restricted user creates a product or a shopping experience, their channels are assigned automatically. That way they do not lose sight of what they just created. They cannot change their own channel assignment, not even for themselves.

Media, manufacturers, properties, promotions, shipping and payment methods as well as customer groups are not restricted. Import and export, the Flow Builder and console commands have no user context and are not covered either. We recommend revoking the permissions for roles, integrations, extensions as well as import and export from restricted users. The manual describes this in detail.

If the administration search is configured to use Elasticsearch, restricted users search through the database instead, because the sales channel rules only exist there. All other users keep searching through Elasticsearch. The only noticeable effect is a slightly slower search for restricted users.

Your benefits:

1. Run several tenants in one Shopware instance without any operator seeing the data of another
2. Real access control instead of a display filter, direct requests and API access are covered as well
3. Products, categories, customers, orders and shopping experiences covered in one go
4. Turnover and order figures per sales channel on the dashboard, no foreign total on the start page
5. A clean category tree that starts right at the area of the user
6. Newly created products and shopping experiences are assigned to the own channels automatically
7. No assignment means no effect, existing users keep working unchanged after the installation
8. Restricted users cannot change their own assignment
9. Configured in a single place in the user administration, without juggling roles

This lets you separate responsibilities cleanly, without running and maintaining a separate Shopware instance for every tenant.