ACSD-53790: Multiple RMAs for a single product can be created via Rest API

The ACSD-53790 patch fixes the issue where multiple RMAs for a single product can be created via Rest API. This patch is available when the Quality Patches Tool (QPT) 1.1.43 is installed. The patch ID is ACSD-53790. Please note that the issue is scheduled to be fixed in Adobe Commerce 2.4.7.

Affected products and versions

The patch is created for Adobe Commerce version:

  • Adobe Commerce (all deployment methods) 2.4.6-p1

Compatible with Adobe Commerce versions:

  • Adobe Commerce (all deployment methods) 2.4.6 - 2.4.6-p3
NOTE
The patch might become applicable to other versions with new Quality Patches Tool releases. To check if the patch is compatible with your Adobe Commerce version, update the magento/quality-patches package to the latest version and check the compatibility on the Quality Patches Tool: Search for patches page. Use the patch ID as a search keyword to locate the patch.

Issue

Multiple RMAs for a single product can be created via Rest API.

Steps to reproduce:

  1. Place an order.
  2. Invoice and ship the order.
  3. Create the RMA using the REST endpoint.
  4. Create the same RMA using the REST endpoint.

Expected results:

A validation error is being displayed instead of creation of a duplicate RMA.

Actual results:

The same RMA is created by the REST endpoint.

Apply the patch

To apply individual patches, use the following links depending on your deployment method:

To learn more about Quality Patches Tool, refer to:

For info about other patches available in QPT, refer to Quality Patches Tool: Search for patches in the Quality Patches Tool guide.

recommendation-more-help
8bd06ef0-b3d5-4137-b74e-d7b00485808a