User without any permissions can add items to the cart

Marcos da Silva Xavier

更新 2023年06月17日 21:00

Issue

Any user added to an Account is able to make a purchase for that account, regardless of Account Roles assigned. This is only able with the Minium template.

Environment

DXP 7.4

Resolution

This issue was resolved by COMMERCE-10054 and COMMERCE-10380 and a hotfix should be requested from Liferay Support with these fixes.