Payment Transaction Release Notes for 2.0.2-GA

When checking if a registered customer can access a payment, if the customer & the payment’s owner don’t align, we block access instead of archiving the payment.

The anonymous customers can no longer read the payments with a CUSTOMER_MUTABILITY_BLOCKED restriction. The payments can have this restriction if the cart is submitted successfully. If your UI needs to read the Cart’s payments and it causes the issue, you should update your integration and use the new endpoint Read a submitted Cart by Order Number with the hydratePayments=true parameter. This endpoint returns the Cart and its payments. If you don’t want to update the UI you can set the property broadleaf.paymenttransaction.service.anonymous-customer-can-read-immutable-payments to true.