Validate CustomerReviewsQuery.StoreId

VirtoCommerce · Oct 16, 2024 · 4cc4ee3 · 4cc4ee3
1 parent c50d5c4
commit 4cc4ee3
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/...ommerce.CustomerReviews.ExperienceApi/Authorization/CustomerReviewAuthorizationHandler.cs b/...ommerce.CustomerReviews.ExperienceApi/Authorization/CustomerReviewAuthorizationHandler.cs
@@ -43,8 +43,8 @@ protected override async Task HandleRequirementAsync(AuthorizationHandlerContext
                 case CreateCustomerReviewCommand command:
                     result = isAuthenticated && command.UserId == currentUserId && await IsStoreAvailable(command.StoreId, currentUserId);
                     break;
-                case CustomerReviewsQuery:
-                    result = true;
+                case CustomerReviewsQuery query:
+                    result = await IsStoreAvailable(query.StoreId, currentUserId);
                     break;
                 case CreateReviewCommand command:
                     result = isAuthenticated && await IsStoreAvailable(command.StoreId, currentUserId);