Entry access right not updated when product moved to another category

Found in

EPiServer.Commerce 11.2.0

Fixed in

EPiServer.Commerce 13.3.0

Created

Apr 10, 2019

Updated

May 28, 2019

Area

Core

State

Closed, Fixed and tested


Description

Steps to reproduce

On Quicksilver:

  1. Set Mens shoes access rights to Admin only (remove "Everyone" access).
  2. Open a product in mens jackets, for example http://commerceref/en/fashion/mens/mens-shoes/p-37378633/, so the content is cached.
  3. In Commerce Manager, move the product above to Mens shoes.
  4. Try to access the product above as an anonymous user.

Expected:
The user is prompted to log in.

Actual:
An anonymous user can see the product.