fix: Make sure that each customer can only create one review per product #3587
+73
−64
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
1. Why is this change necessary?
Currently the validation is not correct, such that the
id
of the product review will be compared with the customer id. Therefore it is possible to create multiple reviews per product (if one is omitting the id, which usually does not happen in the normal storefront). Furthermore it would be possible to overwrite the name or email from the request, which also does not happen.2. What does this change do, exactly?
Fix the validation and always use the values from the customer object and cleanup some other stuff.
3. Describe each step to reproduce the issue or behaviour.
-
4. Please link to the relevant issues (if any).
-
5. Checklist