Skip to content

Latest commit

 

History

History
21 lines (21 loc) · 1.02 KB

2022-03-02-secure-proxy-routes-with-acl.md

File metadata and controls

21 lines (21 loc) · 1.02 KB
Raw
title issue author author_email author_github
Secure proxy route to switch customer with ACL
NEXT-20305
Frederik Schmitt
f.schmitt@shopware.com
fschmtt

Core

  • Added migration Shopware\Core\Migration\V6_4\Migration1646397836UpdateRolePrivilegesOfOrderCreator for updating existing ACL roles

API

  • Changed route api.proxy.switch-customer to require the newly added privilege api_proxy_switch-customer

Administration

  • Changed role order.creator to require privilege api_proxy_switch-customer in src/module/sw-order/acl/index.js
  • Added sw-privileges.additional_permissions.routes.api_proxy_switch-customer in src/module/sw-users-permissions/snippet/de-DE.json
  • Added sw-privileges.additional_permissions.routes.api_proxy_switch-customer in src/module/sw-users-permissions/snippet/en-GB.json

Upgrade Information

Proxy route to switch customer requires ACL privilege

If you want to use the route api.proxy.switch-customer you MUST have the privilege api_proxy_switch-customer.