MC-42528: GraphQL query of categoryList shows all categories

The MC-42528 patch solves the issue where the GraphQL query of categoryList returns both assigned and unassigned categories when the Browsing Category of a particular category is set to "Deny". This patch is available when the Quality Patches Tool (QPT) 1.1.4 is installed. The patch ID is MC-42528. Please note that the issue is scheduled to be fixed in Adobe Commerce 2.4.4.

Affected products and versions

The patch is created for Adobe Commerce version:

• Adobe Commerce (all deployment methods) 2.4.3

Compatible with Adobe Commerce versions:

• Adobe Commerce (all deployment methods) 2.4.3 - 2.4.3-p1

Issue

GraphQL query of categoryList returns both assigned and unassigned categories.

Steps to reproduce:

1. Create two categories, CAT1 and CAT2, and assign few products to each category.
2. Create a private shared catalog.
3. Create a company user and assign it to the created shared catalog.
4. Assign CAT1 to the custom catalog and set the category permission to "Allow" Browsing Category for the customer group of the private catalog.
5. Set the category permission for CAT2 to "Deny" Browsing Category for the customer group of private catalog.
6. Run the categoryList or categories GraphQL query as the company user.

Expected results:

Only the CAT1 shows up in the response.

Actual results:

All the categories show up in the response regardless of the browsing permissions of category.

Apply the patch

To apply individual patches, use the following links depending on your deployment method:

• Adobe Commerce or Magento Open Source on-premises: Software Update Guide > Apply Patches in our developer documentation.
• Adobe Commerce on cloud infrastructure: Upgrades and Patches > Apply Patches in our developer documentation.

Related reading

To learn more about Quality Patches Tool, refer to:

• Quality Patches Tool released: a new tool to self-serve quality patches in our support knowledge base.
• Check if patch is available for your Adobe Commerce issue using Quality Patches Tool in our support knowledge base.

For info about other patches available in QPT, refer to the Patches available in QPT section.