Skip to content

Latest commit

 

History

History
9 lines (9 loc) · 470 Bytes

2022-04-08-prevent-assignment-of-sales-channel-context-to-customer-if-permissions-are-set.md

File metadata and controls

9 lines (9 loc) · 470 Bytes
title issue author author_email author_github
Prevent assignment of sales channel context to customer if permissions are set
NEXT-21315
Nils Evers
NilsEvers

Core

  • Changed \Shopware\Core\System\SalesChannel\SalesChannel\ContextSwitchRoute::switchContext to only assign the SalesChannelContext to a customer if no permissions are set on the context. This prevents customers from being able to obtain permissions from an API call.