Ships It Friday
1 / 3
Geoff Tarrant
June added a button that signed staff in as any customer, with no way back out. Toby pressed it and ordered forty-one ironing boards onto a real customer in Swindon.
The mistake
The impersonation feature signs a staff member into a real customer's session so they can act as that customer, but it ships with no sign-out path and no scoping or confirmation step before write actions. Any order placed while impersonating goes straight onto the live customer's account and is indistinguishable from an order the customer placed themselves, so there is no safeguard between a test action and a real one.
- admin-tools
- customer-data
- ecommerce
- frontend
- release