Improve your Data Security with Retailer-specific Permissions enabled for Comment GraphQL API

Fluent Application Admins can now manage data access and operation Permissions at the Retailer level for the Comment GraphQL API. Configurable via the new

`fc.graphql.comment.access`

• Secure Direct Object References, enabling Users from a specific Retailer to create, update, and view Comments only for entities they are authorized to access. (i.e., the entities of the same Retailer).
• Full backward compatibility with no need for any migration process.

📖 Get the instructions for the Comment GraphQL API operations:

• Create Comment
• Update Comment
• Get Comment by Id
• Query Comments

Comment GraphQL API

• A new

  `fc.graphql.comment.access`

  Setting has been introduced to manage User access rights for creating, updating, and viewing Comments with the corresponding GraphQL Permissions at the Account or Retailer level.
• GraphQL API has been extended to execute the "Retailer-specific Comment Permission Checks" for the Comment GraphQL API operations:

  • `createComment`

    Mutation

  • `updateComment`

    Mutation

  • `commentById`

    Query

  • `comments`

    Query