Question for @Martin Da Rosa and @Steve Goldberg, and you might not be at liberty to say. I just got off the phone with support and the proposed fix was for them to unlock our CMS records so that I could change the Access Type - External Roles/Unauthenticated Users Permissions to Full. Now these are custom records in our account.
I also just read about a potential issue with custom records on the Suitecommerce platforms potentially allowing for a brute force API breach, if the hacker knows the custom record names/id's. Since these bundles are provided by Netsuite, the names/id's are very easy to locate. Is this not a concern?