Try our conversational search powered by Generative AI!

Node access right not updated immediately when moved to restricted node

Found in

EPiServer.Commerce 13.2.0

Fixed in

EPiServer.Commerce 13.3.1

(Or a related package)

Created

Apr 23, 2019

Updated

Jun 12, 2019

State

Closed, Fixed and tested


Description

Steps to reproduce
On Quicksilver:

  1. Set Mens shoes access rights to Admin only (remove Everyone access).
  2. Open a product in mens jackets, for example en/fashion/mens/mens-jackets/p-37378633/.
  3. In Commerce Manager, move the node Mens Jackets under Mens Shoes.
  4. Try to access the product above as an anonymous user with /en/fashion/mens/mens-shoes/mens-jackets/p-37378633/

Expected:
The user is asked to log in.

Actual:
An anonymous user can see the product. (Access right for Everyone still exists)

  • Note: After restarting the site from IIS, an anonymous user cannot see the product.