[5.x]: Duplicate product doesn't respect permission

[frederik-station]

What happened?

Description

Users that don't have the "Create products" permission for a product type can still create new products by duplicating existing ones in the products panel:

Same issue on Craft Commerce 4.

Steps to reproduce

1. Log in with a user that doesn't have permission to create a specific product
2. Duplicate that product

Expected behavior

The user shouldn't be able to duplicate the product.

Actual behavior

The user is able to duplicate the product.

Craft CMS version

5.5.8

Craft Commerce version

5.2.11

PHP version

No response

Operating system and version

No response

Database type and version

No response

Image driver and version

No response

Installed plugins and versions

[linear]

PT-2371 [5.x]: Duplicate product doesn't respect permission

[lukeholder]

Thanks, this is fixed for the next release.

To get the fix early, change your craftcms/commerce requirement in composer.json to:

"require": {
  "craftcms/commerce": "5.x-dev#7df79773d118818bdc44fe2b5650da6e2ac89a3a as 5.2.11",
  "...": "..."
}

Then run composer update.

We will update this ticket once the release is out.