
A security-hardening release: five ownership checks that ensure vendors can only view or change the shipping rates, subscriptions, and verification records that belong to them.
Privacy and security
- Fix: Restricted Table Rate Shipping rates so only the vendor who owns the shipping method can view, change, or delete them.
- Fix: Restricted Distance Rate Shipping settings so only the vendor who owns the shipping method can view, change, or delete them.
- Fix: Scoped vendor subscription schedule changes to the vendor’s own subscription, so one vendor can no longer alter another’s schedule.
- Fix: Scoped vendor subscription status changes to the vendor’s own subscription, so one vendor can no longer alter another’s status.
- Fix: Scoped the verification requests list to the current vendor, so each vendor sees only their own identity documents.