Affects Version/s: None
Fix Version/s: None
Component/s: User Management > Business Accounts
Sprint:U&SM| S04 Sprint 5|12.15-1.5
User is a member of both AccountA and AccountB
AccountA does have permission to view Layout
AccountB does NOT have permission to view Layout
When AccountA is the current account, User can view Layout
When AccountB is the current account, User can NOT view Layout
We will accomplish this in the following steps:
1. The “currentAccountEntryId” will be stored on and retrieved from the session, more or less like it currently is in Commerce.
2. For permission checking purposes, a custom ServletFilter will retrieve the currentAccountEntryId from the session and inject it into a private AccountEntryThreadLocal, only to be used by the AccountRoleContributor. It will never be exposed as API.