QUALITY PATCH

ACP2E-4565: The Company GraphQL query returns The current customer isn't authorized…

The Company GraphQL query returns The current customer isn't authorized when both the X‑Adobe‑Company and Store headers are included in the request, even though the customer is properly assigned to the specified company and store. Quality patch ACP2E-4565 for magento/module-company-graph-ql applies to Magento Open Source and Adobe Commerce 2.4.6-p8 to 2.4.8-p4.

Categories
GraphQL, B2B
Components
magento/module-company-graph-ql
Origin
adobe-commerce-support
Since QPT
1.1.78

Issue

The Company GraphQL query returns The current customer isn't authorized when both the X‑Adobe‑Company and Store headers are included in the request, even though the customer is properly assigned to the specified company and store.

Steps to reproduce

1. Enable B2B company. 1. Create an additional website, store, and store view. 1. Create two companies (Company one and Company two). 1. Create a user assigned to the second website. 1. Assign both companies to the user. 1. Execute the following GraphQL query with these headers: * X-Adobe-Company: MQ== * Store: storeview2 query Company { company { id legal_name name } }

Adobe's page lists 2.4.7-p3 as compatible; the versions below are resolved from the current QPT constraints and are the ones the tool will offer.

Adobe scheduled the permanent fix for 2.4.9.

Install

Install the Quality Patches Tool with composer require magento/quality-patches, apply the prerequisites listed for all files applicable to your distribution and version first, then run vendor/bin/magento-patches apply ACP2E-4565. On Cloud, add ACP2E-4565 under stage.build.QUALITY_PATCHES in .magento.env.yaml.

For cweagans/composer-patches, choose a compatible version below and download the bundle. Copy its ACP2E-4565/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Bundle prerequisites the same way and list them first. Paths are relative to each package root, using the default -p1 level. Prefer local files when configuring composer-patches; a remote URL can change.

Patch files and compatible versions

Packages across compatible versions (1): magento/module-company-graph-ql

magento/magento2-b2b-base >=1.5.0 <1.5.3

Magento Open Source
—
Adobe Commerce
2.4.8-p4, 2.4.8-p3, 2.4.8-p2, 2.4.8-p1, 2.4.8, 2.4.7-p10, 2.4.7-p9, 2.4.7-p8, 2.4.7-p7, 2.4.7-p6, 2.4.7-p5, 2.4.7-p4, 2.4.7-p3, 2.4.6-p15, 2.4.6-p14, 2.4.6-p13, 2.4.6-p12, 2.4.6-p11, 2.4.6-p10, 2.4.6-p9, 2.4.6-p8
Patch file
patches/commerce/ACP2E-4565_B2B-1.5.2-p3.patch
  • vendor/magento/module-company-graph-ql/Controller/HttpRequestValidator/CompanyValidator.php

Sources

Łukasz Bajsarowicz
Built by

Łukasz Bajsarowicz, e-commerce architect

Magento and Adobe Commerce architecture, upgrades, performance and audits for merchants and agencies since 2015; magento.watch is the tooling I use on those projects.

Open source, maintained on weekends.