MDVA-31236: Magento Admins with custom resource access are not able to set up 2FA or log in
Magento Admins with custom resource access are not able to set up 2FA or log in. Quality patch MDVA-31236 for magento/module-two-factor-auth applies to Magento Open Source and Adobe Commerce 2.4.0 to 2.4.1.
- Categories
- Admin
- Components
- magento/module-two-factor-auth
- Origin
- adobe-commerce-support
No Adobe documentation page exists for this patch.
Install
Install the Quality Patches Tool with composer require magento/quality-patches, apply the prerequisites listed for all files applicable to your distribution and version first, then run vendor/bin/magento-patches apply MDVA-31236. On Cloud, add MDVA-31236 under stage.build.QUALITY_PATCHES in .magento.env.yaml.
For cweagans/composer-patches, choose a compatible version below and download the bundle. Copy its MDVA-31236/ folder into patches/composer/, merge composer.patches.json into composer.json, then run composer install. Bundle prerequisites the same way and list them first. Paths are relative to each package root, using the default -p1 level. Prefer local files when configuring composer-patches; a remote URL can change.
Patch files and compatible versions
magento/security-package >=1.0.0 <1.1.1
- Patch file
- patches/os/MDVA-31236_2.4.0.patch
- vendor/magento/module-two-factor-auth/Observer/ControllerActionPredispatch.php
