Skip to content

Commit d38de31

Browse files
author
Novykov Ivan
committed
MDVA-270: Portdown MAGETWO-51808
1 parent 84dedf7 commit d38de31

File tree

1 file changed

+3
-3
lines changed
  • app/code/Magento/Webapi/Controller/Soap/Request

1 file changed

+3
-3
lines changed

app/code/Magento/Webapi/Controller/Soap/Request/Handler.php

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -107,10 +107,10 @@ public function __call($operation, $arguments)
107107
throw new WebapiException(__("Operation allowed only in HTTPS"));
108108
}
109109

110-
$isAllowed = false;
110+
$isAllowed = true;
111111
foreach ($serviceMethodInfo[ServiceMetadata::KEY_ACL_RESOURCES] as $resource) {
112-
if ($this->_authorization->isAllowed($resource)) {
113-
$isAllowed = true;
112+
if (!$this->_authorization->isAllowed($resource)) {
113+
$isAllowed = false;
114114
break;
115115
}
116116
}

0 commit comments

Comments
 (0)