Posted on 04/02/2021 12:35:47
Hi guys,
The problem as I see it is that once you're on the Product Details view it seems to bypass the applied index / query the Product Catalogue App uses and allows you to look up any product in the system, and this is actually happening in more than one solution running on different versions of Dynamicweb.
For example look at these two links:
https://skor.s4s.is/skor/skor-s4s-is-skor-doemuskor/fylltir-haelar?ProductId=E-27330352603
https://ellingsen.s4s.is/ellingsen/herrar/ullarfatna%C3%B0ur/ullarbuxur?ProductID=E-27330352603
The product E-27330352603 is only supposed to be available for skor.s4s.is, the product catalogue apps for these pages are set to display products from specific Ecommerce product groups and the product only exists in one of those groups. In this case we're running seperate websites but one shop, index and query.
However in the example Anton gives in the original post we're running two websites (a4.is and legobudin.is) with their own shops, indexes and queries, and a different URL scheme than skor.s4s.is so it should literally be impossible to look up A4 products on Legobudin and vice versa, but yet we can:
https://a4.is/voerur/toeflutusspenni-skaskorinn-blar
https://legobudin.is/%C3%BEemu/toeflutusspenni-skaskorinn-blar
And I can do this on any product list page if I just add the product name at the end of the url, just like on skor.s4s.is if I change the ProductId.
Best regards,
Arnór