Merge branch 'AC-12453' into cia-2.4.8-beta1-develop-bugfix-09022024

Author: pawan-adobe-security

app/code/Magento/Sales/Controller/Adminhtml/Order/Create.php

@@ -26,6 +26,10 @@ abstract class Create extends \Magento\Backend\App\Action
      * Indicates how to process post data
      */
     private const ACTION_SAVE = 'save';
+    /**
+     * Controller name for edit actions
+     */
+    private const CONTROLLER_NAME_ORDER_EDIT = 'order_edit';
     /**
      * @var \Magento\Framework\Escaper
      */
@@ -380,6 +384,9 @@ protected function _getAclResource()
         if (in_array($action, ['index', 'save', 'cancel']) && $this->_getSession()->getReordered()) {
             $action = 'reorder';
         }
+        if (strtolower($this->getRequest()->getControllerName() ?? '') === self::CONTROLLER_NAME_ORDER_EDIT) {
+            $action = 'actions_edit';
+        }
         switch ($action) {
             case 'index':
             case 'save':
@@ -391,6 +398,9 @@ protected function _getAclResource()
             case 'cancel':
                 $aclResource = 'Magento_Sales::cancel';
                 break;
+            case 'actions_edit':
+                $aclResource = 'Magento_Sales::actions_edit';
+                break;
             default:
                 $aclResource = 'Magento_Sales::actions';
                 break;