MDVA-37748: GraphQL query returns products not assigned to shared catalog
The MDVA-37748 patch fixes the issue where a GraphQL query returns products not assigned to a shared catalog. This patch is available when the Quality Patches Tool (QPT) 1.1.5 is installed. The patch ID is MDVA-37748. Please note that the issue is scheduled to be fixed in Adobe Commerce 2.4.4.
Affected products and versions
The patch is created for Adobe Commerce version:
Adobe Commerce (all deployment methods) 2.4.2
Compatible with Adobe Commerce versions:
Adobe Commerce (all deployment methods) 2.4.2 - 2.4.2-p2
NOTE
The patch might become applicable to other versions with new Quality Patches Tool releases. To check if the patch is compatible with your Adobe Commerce version, update the magento/quality-patches package to the latest version and check the compatibility on the QPT landing page. Use the patch ID as a search keyword to locate the patch.
Issue
GraphQL query returns products not assigned to a shared catalog.
Prerequisites:
B2B modules are installed.
Steps to reproduce:
-
Create two products and assign them to a category:
- Product 1 - Public
- Product 2
-
Assign "Product 1 - Public" to the "Default (General)" shared catalog.
-
Create an additional custom shared catalog and assign it to "Product 2."
-
Create a new company and assign it to the additional shared catalog created in step three.
-
After cron execution/reindex, on the frontend, validate that you can see "Product 1 - Public" if you are not logged in.
-
Log in as the admin of the company created in step four, and validate that you only see "Product 2."
-
Request an Authorization Token using the following GraphQL query:
mutation {
generateCustomerToken(
email: "company.admin@exapmle.test"
password: "password"
) {
token
}
}
-
Add header Authorization Bearer value-of-the-token and execute the following GraphQL query:
{
products(
filter: {},
pageSize: 100,
currentPage: 1
sort: {}
) {
total_count
page_info {
page_size
current_page
}
aggregations {
attribute_code
count
label
options {
label
value
count
}
}
items {
name
sku
created_at
updated_at
stock_status
description {html}
short_description {html}
url_key
url_path
price_tiers{
final_price{
value
currency
}
discount{
amount_off
percent_off
}
quantity
}
price_range {
maximum_price {
regular_price {
value
}
final_price {
value
}
}
minimum_price {
regular_price {
value
}
final_price {
value
}
}
}
image {
url
}
thumbnail {
url
}
small_image {
url
}
media_gallery {
url
}
... on ConfigurableProduct {
configurable_options {
id
label
position
use_default
attribute_code
values {
value_index
label
swatch_data {
value
}
}
product_id
}
variants {
product {
id
name
sku
#margin
#margin_percentage
image {
url
}
small_image {
url
}
thumbnail {
url
}
media_gallery{
url
}
attribute_set_id
... on PhysicalProductInterface {
weight
}
price_range {
minimum_price {
regular_price {
value
currency
}
}
}
}
attributes {
label
code
value_index
}
}
}
}
}
}
Expected results:
The count and the product returned by GraphQL only consider the product assigned to the shared catalog associated with the logged-in user.
Actual results:
Only "Product 2" is returned, but the total_count shows two.
{
"data": {
"products": {
"total_count": 2,
"page_info": {
"page_size": 100,
"current_page": 1
},
"aggregations": [
{
"attribute_code": "price",
"count": 2,
"label": "Price",
"options": [
{
"label": "0-100",
"value": "0_100",
"count": 1
},
{
"label": "100-200",
"value": "100_200",
"count": 1
}
]
},
{
"attribute_code": "category_id",
"count": 1,
"label": "Category",
"options": [
{
"label": "Cat 1",
"value": "3",
"count": 2
}
]
}
],
"items": [
{
"name": "Product 2",
"sku": "Product 2",
"created_at": "2021-05-12 10:51:44",
"updated_at": "2021-05-12 11:03:24",
"stock_status": "IN_STOCK",
"description": {
"html": ""
},
"short_description": {
"html": ""
},
"url_key": "product-2",
"url_path": null,
"price_tiers": [
{
"final_price": {
"value": 90,
"currency": "USD"
},
"discount": {
"amount_off": 10,
"percent_off": 10
},
"quantity": 1
}
],
"price_range": {
"maximum_price": {
"regular_price": {
"value": 100
},
"final_price": {
"value": 90
}
},
"minimum_price": {
"regular_price": {
"value": 100
},
"final_price": {
"value": 90
}
}
},
"image": {
"url": "../pub/static/version1620816308/frontend/Magento/luma/en_US/Magento_Catalog/images/product/placeholder/image.jpg"
},
"thumbnail": {
"url": "../pub/static/version1620816308/frontend/Magento/luma/en_US/Magento_Catalog/images/product/placeholder/thumbnail.jpg"
},
"small_image": {
"url": "../pub/static/version1620816308/frontend/Magento/luma/en_US/Magento_Catalog/images/product/placeholder/small_image.jpg"
},
"media_gallery": []
}
]
}
}
}
Apply the patch
To apply individual patches, use the following links depending on your deployment method:
To learn more about Quality Patches Tool, refer to:
For info about other patches available in QPT, refer to the Patches available in QPT section.