ACL for frontend (restricted webshop)

-- HikaShop version -- : 2.6.0
-- Joomla version -- : 3.4.5
-- PHP version -- : 5.5.30

Hi,
I can't get the ACL to work right.

My Webshop Menu is for ACL group Shoppers only.
Still Hikashop seems to ignore this. When I log in with an account that is not in the ACL group shopper, this user can still see the Webshop menu.

I have the business edition and I can see that I can configure access levels there too, but to my knowledge this affects only the backend access, or am I wrong there?

What do I have to do in HIkashop to restrict access to the (front-end) webshop (menu, cart, products etc) only to the usergroup Shopper.

(because my users are only allowed to shop once and are removed from the group Shopper in the last step of the order - thru mass action).

I have, but when the ACL is changed after order (thru a massaction) this is ignored.

I changed a few things in the massaction order to refresh the acl as follows, this is working now without logging out the user:

$user = JFactory::getUser();
$session = JFactory::getSession();
$session->set('user', new JUser($user->id));
//new data for your user after the update
$user = JFactory::getUser();

Hi,

So this comes us back to this issue:
hikashop.com/forum/checkout/880304-how-t...html?start=20#221517

The user needs to be logged out, and log in again to apply the new group ACLs.

No, it works now without logging out which is great (it is a bit aggresive to throw the customer out of the shop).