Permission to view Billing Address

• Type: Story
• Status: Closed
• Priority: Critical
• Resolution: Completed
• Affects Version/s: None
• Fix Version/s: 7.4 DXP U16, 7.4 DXP U17
• Component/s: Order Management
• Labels:
  • SMC
  • must-have
  • pt-app-security-review
  • pt-upgrade-review
• Business Value (single choice): 1
• Epic Link: Faster Checkout with Account Defaults
• Sprint: Commerce Sprint 07 - Mar/2022
• Story Points: 8
• Git Pull Request: https://github.com/liferay-commerce/liferay-portal/pull/2356

As a Sales Manager

I want to be able to limit what users can see the billing address(s) associated with an Account

So that I can limit the possibility of fraud

 

Acceptance Criteria

• New Permission to be able to "View Billing Address" .
  1. Permission to be found in Account Roles 
• If user HAS this permission
  1. On order checkout workflow user can view and choose between existing billing addresses
  2. On Order Summary Page, User can See the billing address
• If user HAS NOT this permission
  1. On order checkout workflow step to set the billing address is skipped
  2. Default Billing Address is used if set 
  3. Default Billing address is NOT shown to user
  4. On Order Summary Page, Billing address is NOT shown to user
  5. On Order Details Page, Billing address is NOT shown to user
     1. For Open Order &
     2. For Placed Order
• NB: For Upgrading purposes, this new permission needs to be switched ON for all existing account roles
• If user does not have this permission and NO billing address exists on the account OR No Default Billing address is set,  THEN when placing an order the following error is shown to the user;
  • "No default billing address has been created for this account. Please contact the system administrator to create an order"
  • Error message should be localised
  • Shown at billing address checkout step
• Guest Account Roles should have this permission as there is currently no way of switching permissions on/off for guests.