From 42c67280eb4ffbe61f5a7fc52a42809deb26dbf9 Mon Sep 17 00:00:00 2001
From: pbaldauf <6916364+pbaldauf@users.noreply.github.com>
Date: Mon, 16 Sep 2024 08:42:11 +0200
Subject: [PATCH] Fix ACL Resource "admin/sales/order/actions/use" not found

The observer just get's triggered from admin area, so we use some existing ACL rule which seems to be introduced exactly for this case.
---
 app/code/core/Mage/Sales/Model/Observer.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/code/core/Mage/Sales/Model/Observer.php b/app/code/core/Mage/Sales/Model/Observer.php
index d4330a82de0..3ab278a0549 100644
--- a/app/code/core/Mage/Sales/Model/Observer.php
+++ b/app/code/core/Mage/Sales/Model/Observer.php
@@ -290,7 +290,7 @@ public function restrictAdminBillingAgreementUsage($observer)
         if (!($methodInstance instanceof Mage_Sales_Model_Payment_Method_Billing_AgreementAbstract)) {
             return;
         }
-        if (!Mage::getSingleton('admin/session')->isAllowed('sales/order/actions/use')) {
+        if (!Mage::getSingleton('admin/session')->isAllowed('sales/billing_agreement/actions/use')) {
             $observer->getEvent()->getResult()->isAvailable = false;
         }
     }