INSERT INTO blc_client_scopes (id, "scope") VALUES('storecreditclient', 'BACKEND_CREDIT_ACCOUNT');
INSERT INTO blc_client_permissions (id, permission) VALUES ('storecreditclient', 'READ_BACKEND_CREDIT_ACCOUNT');
Updated the store credit PaymentGatewayPaymentValidator
implementation to ensure that a Broadleaf customer-owned store credit account can only be used by the same registered customer. In other words, it validates that the Payment’s customer is the same registered Broadleaf customer.
This makes use of a new provider (the StoreCreditAccountProvider
) to gather the CreditAccount by account number.
Added alternativeOwningUserType
, alternativeOwningUserRef
, & attributes
fields to the CreditAccount domain.
To support the new StoreCreditAccountProvider
, the following configuration must be added to the store credit authorize client:
INSERT INTO blc_client_scopes (id, "scope") VALUES('storecreditclient', 'BACKEND_CREDIT_ACCOUNT');
INSERT INTO blc_client_permissions (id, permission) VALUES ('storecreditclient', 'READ_BACKEND_CREDIT_ACCOUNT');