MC-36647: Order can be placed as a customer after session cookie expiration with Persistent Cart enabled

Author: Roman Lytvynenko

app/code/Magento/Customer/Model/Customer/Authorization.php

@@ -4,6 +4,7 @@
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
  */
+declare(strict_types=1);
 
 namespace Magento\Customer\Model\Customer;
 
@@ -64,17 +65,16 @@ public function __construct(
      */
     public function isAllowed($resource, $privilege = null)
     {
-        if ($resource == AuthorizationService::PERMISSION_SELF
+        if ($resource === AuthorizationService::PERMISSION_SELF
             && $this->userContext->getUserId()
             && $this->userContext->getUserType() === UserContextInterface::USER_TYPE_CUSTOMER
         ) {
             $customer = $this->customerFactory->create();
             $this->customerResource->load($customer, $this->userContext->getUserId());
             $currentStoreId = $this->storeManager->getStore()->getId();
             $sharedStoreIds = $customer->getSharedStoreIds();
-            if (in_array($currentStoreId, $sharedStoreIds)) {
-                return true;
-            }
+
+            return in_array($currentStoreId, $sharedStoreIds);
         }
 
         return false;

app/code/Magento/Customer/Model/Customer/AuthorizationComposite.php

@@ -4,6 +4,7 @@
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
  */
+declare(strict_types=1);
 
 namespace Magento\Customer\Model\Customer;
 

app/code/Magento/Persistent/Model/Customer/Authorization.php

@@ -3,6 +3,7 @@
  * Copyright © Magento, Inc. All rights reserved.
  * See COPYING.txt for license details.
  */
+declare(strict_types=1);
 
 namespace Magento\Persistent\Model\Customer;