Skip to content

Customer Sharing Options not respected in REST API #26089

Closed
@ghost

Description

Preconditions (*)

  1. PHP 7.3.12
  2. Magento 2.4-develop

Steps to reproduce (*)

  1. Create multiple websites and store views. For example website1 with storeview1 and website2 with storeview2;
    Screenshot from 2020-06-15 15-33-37

  2. Go to Admin->Stores->Configuration->Customers->Customer Configuration->Account Sharing Options and set Share Customer Accounts to 'Per Website';

  3. Create a user account in website1;

  4. Use REST API to login with user and password to retrieve the bearer token
    Screenshot from 2020-06-15 15-37-20

  5. Read user details with GET /rest/storeview1/V1/customers/me

  6. Read user details with GET /rest/storeview2/V1/customers/me

Expected result (*)

  1. /rest/storeview1/V1/customers/me should return user information
  2. /rest/storeview2/V1/customers/me should return an error (e.g. unauthorized)

Actual result (*)

  1. /rest/storeview1/V1/customers/me returns user information
  2. /rest/storeview2/V1/customers/me returns user information

Metadata

Metadata

Assignees

Labels

Component: CustomerComponent: WebapiUse with concrete module component label E.g. "Component: Webapi" + "Catalog"Fixed in 2.4.xThe issue has been fixed in 2.4-develop branchIssue: ConfirmedGate 3 Passed. Manual verification of the issue completed. Issue is confirmedIssue: Format is validGate 1 Passed. Automatic verification of issue format passedIssue: Ready for WorkGate 4. Acknowledged. Issue is added to backlog and ready for developmentPriority: P2A defect with this priority could have functionality issues which are not to expectations.Reproduced on 2.4.xThe issue has been reproduced on latest 2.4-develop branchSeverity: S1Affects critical data or functionality and forces users to employ a workaround.Triage: DoneHas been reviewed and prioritized during Triage with Product Managers

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions