Permissions via annotation does not check after load the page
Summary
When you have loaded page with products and then someone else revoke your permission to manage products, you can still remove products from the system.
Steps to reproduce
- Login as admin
- Open 2 tabs
- (tab 1) go to the products list
- (tab 2) go to the System->Roles->Administrator->Permissions
- (tab 2) uncheck Product permissions and save
- (tab 1) remove any product
- (tab 2) check Products permissions and save
- (tab 1) Reload page
What is the current bug behavior?
Product is removed
What is the expected correct behavior?
Permission denied
Relevant logs and/or screenshots
(Paste any relevant logs - please use code blocks (```) to format console output, logs, and code as it's very hard to read otherwise.)
Possible fixes
(If you can, link to the line of code that might be responsible for the problem)