Merge remote-tracking branch 'origin/MDVA-270' into 2.0.6_backlog

Sergey Nosov · Sergey Nosov · commit b5c24465cee4 · 2016-05-04T11:59:26.000+03:00
diff --git a/app/code/Magento/Webapi/Controller/Soap/Request/Handler.php b/app/code/Magento/Webapi/Controller/Soap/Request/Handler.php
@@ -107,10 +107,10 @@ public function __call($operation, $arguments)
             throw new WebapiException(__("Operation allowed only in HTTPS"));
         }
 
-        $isAllowed = false;
+        $isAllowed = true;
         foreach ($serviceMethodInfo[ServiceMetadata::KEY_ACL_RESOURCES] as $resource) {
-            if ($this->_authorization->isAllowed($resource)) {
-                $isAllowed = true;
+            if (!$this->_authorization->isAllowed($resource)) {
+                $isAllowed = false;
                 break;
             }
         }

Original file line number	Diff line number	Diff line change
`@@ -107,10 +107,10 @@ public function __call($operation, $arguments)`
`107`	`107`	`throw new WebapiException(__("Operation allowed only in HTTPS"));`
`108`	`108`	`}`
`109`	`109`
`110`		`- $isAllowed = false;`
	`110`	`+ $isAllowed = true;`
`111`	`111`	`foreach ($serviceMethodInfo[ServiceMetadata::KEY_ACL_RESOURCES] as $resource) {`
`112`		`- if ($this->_authorization->isAllowed($resource)) {`
`113`		`- $isAllowed = true;`
	`112`	`+ if (!$this->_authorization->isAllowed($resource)) {`
	`113`	`+ $isAllowed = false;`
`114`	`114`	`break;`
`115`	`115`	`}`
`116`	`116`	`}`