For the Patch if my customer does not use Product Review or Product list will they be ok ? or do i have to download the bundles and apply teh patch any way ?
m
Matt Gochee
04/04/2025, 4:30 PM
Same question for me. Seems that most of the file updates are for source code files confirming the logged in status of the customer. Do these SCA source code files still need to be updated even if not using product reviews or product lists?
s
Steve Goldberg
04/04/2025, 4:47 PM
So, here's the gist. The patch fixes a permissions change that if unpatched will result in a "NOT ALLOWED" error appearing on the web store if services for Product Lists and Product Reviews is called.
Steve Goldberg
04/04/2025, 4:47 PM
If these services are never called on your site then theoretically you do not need to apply the patch
Steve Goldberg
04/04/2025, 4:49 PM
If you have the bundles currently installed – or if the records still exist (ie you had it installed and then uninstalled but didn't remove the record types, eg because records of that type still exist) then it's possible the calls will still happen. You will need to evaluate your site using the network tab to see if you want to dodge applying the patch
Steve Goldberg
04/04/2025, 4:49 PM
My official position is that you should apply the patch but I understand if you want to avoid work that you think is unnecessary.
u
//greg
04/04/2025, 4:50 PM
Customer update notice was for April 3rd so i went ahead and did it any way but i was nervous cause i havent touched source code files since Kilimanjaro lol . thanks anyway @Steve Goldberg