Closed

Description
Preconditions (*)
- PHP 7.3.12
- Magento 2.4-develop
Steps to reproduce (*)
-
Create multiple websites and store views. For example website1 with storeview1 and website2 with storeview2;
-
Go to Admin->Stores->Configuration->Customers->Customer Configuration->Account Sharing Options and set Share Customer Accounts to 'Per Website';
-
Create a user account in website1;
-
Use REST API to login with user and password to retrieve the bearer token
-
Read user details with GET
/rest/storeview1/V1/customers/me
-
Read user details with GET
/rest/storeview2/V1/customers/me
Expected result (*)
- /rest/storeview1/V1/customers/me should return user information
- /rest/storeview2/V1/customers/me should return an error (e.g. unauthorized)
Actual result (*)
- /rest/storeview1/V1/customers/me returns user information
- /rest/storeview2/V1/customers/me returns user information
Metadata
Metadata
Assignees
Labels
Use with concrete module component label E.g. "Component: Webapi" + "Catalog"The issue has been fixed in 2.4-develop branchGate 3 Passed. Manual verification of the issue completed. Issue is confirmedGate 1 Passed. Automatic verification of issue format passedGate 4. Acknowledged. Issue is added to backlog and ready for developmentA defect with this priority could have functionality issues which are not to expectations.The issue has been reproduced on latest 2.4-develop branchAffects critical data or functionality and forces users to employ a workaround.Has been reviewed and prioritized during Triage with Product Managers