[4.x]: Delete action for edit product does not look to check permission via the Elements service to determine whether the delete button is shown in the cp

[samhibberd]

What happened?

Description

Steps to reproduce

Hooked into Elements service EVENT_AUTHORIZE_DELETE and set$e->authorized = false;
Event::on(Elements::class, Elements::EVENT_AUTHORIZE_DELETE, [ElementsHandler::class, 'authorizeDelete']);

Expected behavior

Delete button is hidden from the cp action menu

Actual behavior

Delete button is not hidden from the cp action menu

PS: Works as expected with craft elements eg Entries, Categories
PPS: It does correctly enforce the permission when hitting delete

Craft CMS version

4.5.6.1

Craft Commerce version

4.3.0

PHP version

No response

Operating system and version

No response

Database type and version

No response

Image driver and version

No response

Installed plugins and versions

[lukeholder]

Thanks. Fixed for the next release.

To get the fix early, change your craftcms/commerce requirement in composer.json to:

"require": {
  "craftcms/commerce": "dev-develop#b2d5f6d2b3eaa5f31abd2e05748b4f3681667c84",
  "...": "..."
}

Then run composer update.

[lukeholder]

@samhibberd good catch on using the service. Will fix.

[lukeholder]

Updated the fix to use the service. Updated to commit b2d5f6d in the composer guide above.

[samhibberd]

Thanks @lukeholder

[nfourtythree]

Commerce 4.3.1 has now been released with these changes.