{"data":{"id":"ACSD-53414","source":"qpt","sourceRef":"magento/quality-patches@1.1.84","title":"Fixes the issue where a restricted admin user can see CMS pages outside of their permissions scope.","categories":["Admin"],"components":["magento/module-admin-gws"],"origin":"adobe-commerce-support","documentation":{"url":"https://experienceleague.adobe.com/en/docs/commerce-operations/tools/quality-patches-tool/patches-available-in-qpt/v1-1-40/acsd-53414-restricted-admin-user-can-see-cms-pages-outside-permissions","path":"help/tools/quality-patches-tool/patches-available-in-qpt/v1-1-40/acsd-53414-restricted-admin-user-can-see-cms-pages-outside-permissions.md","blobSha":"88dca63aaf018cb519ee9e8d593ac78295d2e701","description":"Restricted admin users can see CMS pages beyond their permissions scope.","stepsToReproduce":"1. Create a new website (sub_website), store (sub_store), and storeview (sub_storeview). 1. Create a sub_expert role, allowing the scope of sub_website and sub_store. Assign the following permissions only: Dashboard and Pages. 1. Create a new admin user and assign it to the sub_expert role. 1. Assign the following CSM pages to sub_storeview and default storeview. * 404 Not Found > Sub storeview * 503 Service Unavailable > Default storeview 1. Sign in to the Admin using the admin user created in Step 3. 1. Check the CMS page grid.","introducedInQpt":"1.1.40","createdFor":["2.4.6-p1"],"documentedRange":"2.4.6 - 2.4.6-p3","scheduledFixRelease":"2.4.7"},"files":[{"package":"magento/magento2-ee-base","constraint":">=2.4.6 <2.4.7","path":"patches/commerce/ACSD-53414_2.4.6-p1.patch","blobSha":"fbbb656155ceb2a944a80ab878502f2de0a12768","url":"https://raw.githubusercontent.com/magento/quality-patches/11d565bdde197b9c7bac859a5698e99098b48457/patches/commerce/ACSD-53414_2.4.6-p1.patch","thirdParty":false,"modifies":[{"path":"vendor/magento/module-admin-gws/Plugin/CollectionFilter.php","change":"modified","package":"magento/module-admin-gws"}],"packages":["magento/module-admin-gws"],"hasTests":false,"applicableVersions":{"magento-community":[],"magento-commerce":["2.4.6-p15","2.4.6-p14","2.4.6-p13","2.4.6-p12","2.4.6-p11","2.4.6-p10","2.4.6-p9","2.4.6-p8","2.4.6-p7","2.4.6-p6","2.4.6-p5","2.4.6-p4","2.4.6-p3","2.4.6-p2","2.4.6-p1","2.4.6"],"mage-os":[]},"unknownVersions":[],"requires":[],"replacedWith":null,"deprecated":false}],"applicableVersions":{"magento-community":[],"magento-commerce":["2.4.6-p15","2.4.6-p14","2.4.6-p13","2.4.6-p12","2.4.6-p11","2.4.6-p10","2.4.6-p9","2.4.6-p8","2.4.6-p7","2.4.6-p6","2.4.6-p5","2.4.6-p4","2.4.6-p3","2.4.6-p2","2.4.6-p1","2.4.6"],"mage-os":[]},"conditions":null,"requirements":null},"_documentation":"https://magento.watch/api","_description":"Quality patch ACSD-53414 details"}