The MC-42528 patch solves the issue where the GraphQL query of categoryList
returns both assigned and unassigned categories when the Browsing Category of a particular category is set to “Deny”. This patch is available when the Quality Patches Tool (QPT) 1.1.4 is installed. The patch ID is MC-42528. Please note that the issue is scheduled to be fixed in Adobe Commerce 2.4.4.
The patch is created for Adobe Commerce version:
Compatible with Adobe Commerce versions:
The patch might become applicable to other versions with new Quality Patches Tool releases. To check if the patch is compatible with your Adobe Commerce version, update the magento/quality-patches
package to the latest version and check the compatibility on the Quality Patches Tool: Search for patches page. Use the patch ID as a search keyword to locate the patch.
GraphQL query of categoryList
returns both assigned and unassigned categories.
Steps to reproduce:
categoryList
or categories
GraphQL query as the company user.Expected results:
Only the CAT1 shows up in the response.
Actual results:
All the categories show up in the response regardless of the browsing permissions of category.
To apply individual patches, use the following links depending on your deployment method:
To learn more about Quality Patches Tool, refer to:
For info about other patches available in QPT, refer to the Patches available in QPT section.