Node access right not updated immediately when moved to restricted node

Found in

EPiServer.Commerce 13.2.0

Fixed in

EPiServer.Commerce 13.3.1

Created

Apr 23, 2019

Updated

Jun 12, 2019

State

Closed, Fixed and tested


Description

Steps to reproduce
On Quicksilver:

  1. Set Mens shoes access rights to Admin only (remove Everyone access).
  2. Open a product in mens jackets, for example en/fashion/mens/mens-jackets/p-37378633/.
  3. In Commerce Manager, move the node Mens Jackets under Mens Shoes.
  4. Try to access the product above as an anonymous user with /en/fashion/mens/mens-shoes/mens-jackets/p-37378633/

Expected:
The user is asked to log in.

Actual:
An anonymous user can see the product. (Access right for Everyone still exists)

  • Note: After restarting the site from IIS, an anonymous user cannot see the product.