MDVA-43718: ‘consumer isn’t authorized to access resources’ error appears when accessing shared catalog

The MDVA-43718 patch solves the issue where the error consumer isn’t authorized to access %resources. appears when accessing a shared catalog from a custom integration. This patch is available when the Quality Patches Tool (QPT) 1.1.15 is installed. The patch ID is MDVA-43718. Please note that the issue is scheduled to be fixed in Adobe Commerce 2.4.5.

Affected products and versions

The patch is created for Adobe Commerce version:

  • Adobe Commerce (all deployment methods) 2.4.1

Compatible with Adobe Commerce versions:

  • Adobe Commerce (all deployment methods) 2.3.0 - 2.4.4
NOTE

The patch might become applicable to other versions with new Quality Patches Tool releases. To check if the patch is compatible with your Adobe Commerce version, update the magento/quality-patches package to the latest version and check the compatibility on the QPT landing page. Use the patch ID as a search keyword to locate the patch.

Issue

The following error appears when accessing a shared catalog from a custom integration: The consumer isn’t authorized to access %resources.

Steps to reproduce:

  1. Create a new integration from the Admin > System > Integration > Add Integration.

  2. Add access for the following resources and activate the integration:

    • Magento_SharedCatalog::list
    • Magento_SharedCatalog::manage
    • Magento_Catalog::catalog

  3. Using the integration access: rest/default/V1/sharedCatalog/1

Expected results:

Details of the shared catalog are returned.

Actual results:

The following error is returned:

"message": "The consumer isn't authorized to access %resources.",
"resources": "Magento_SharedCatalog::sharedCatalog"

Apply the patch

To apply individual patches, use the following links depending on your deployment method:

To learn more about Quality Patches Tool, refer to:

For info about other patches available in QPT, refer to Patches available in QPT in our developer documentation.

On this page