Uploaded image for project: 'Blesta Core'
  1. Blesta Core
  2. CORE-3406

Better support fraud checks prior to client creation

    Details

    • Type: Story
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 4.9.0-b1
    • Component/s: None
    • Labels:
      None

      Description

      See CORE-3074 for details.

      Fraud checks on the Order plugin occur prior to client registration, which is desired in order to prevent fraud clients from being created in the system. However, fraud checks occur on every request regardless of whether enough/valid information was provided to actually create the client in the system.

      The solution is two-fold:

      1. Update the core to add any methods necessary to determine whether a client can be created before attempting to create one via Clients::create.
        • Update any calls prior to Clients::create to validate that the information provided is enough to pass Clients::create before attempting to do so
      2. Update the Order plugin to validate the information provided for creating a client is valid prior to attempting to run the fraud check or create the client via Clients::create

        Activity

        tyson Tyson Phillips (Inactive) created issue -
        tyson Tyson Phillips (Inactive) made changes -
        Field Original Value New Value
        Rank Ranked higher
        tyson Tyson Phillips (Inactive) made changes -
        Story Points 8
        tyson Tyson Phillips (Inactive) made changes -
        Description See CORE-3074 for details. See CORE-3074 for details.

        Fraud checks on the Order plugin occur prior to client registration, which is desired in order to prevent fraud clients from being created in the system. However, fraud checks occur on every request regardless of whether enough/valid information was provided to actually create the client in the system.

        The solution is two-fold:
        # Update the core to add any methods necessary to determine whether a client can be created before attempting to create one via _Clients::create_.
        #* Update any calls prior to _Clients::create_ to validate that the information provided is enough to pass _Clients::create_ before attempting to do so
        # Update the Order plugin to validate the information provided for creating a client is valid prior to attempting to run the fraud check or create the client via _Clients::create_
        tyson Tyson Phillips (Inactive) made changes -
        Sprint 4.9.0 Sprint 3 [ 101 ]
        jonathan Jonathan Reissmueller made changes -
        Assignee Jonathan Reissmueller [ jonathan ]
        jonathan Jonathan Reissmueller made changes -
        Status Open [ 1 ] In Review [ 5 ]
        Resolution Fixed [ 1 ]
        tyson Tyson Phillips (Inactive) made changes -
        Sprint 4.9.0 Sprint 3 [ 101 ] 4.9.0 Sprint 3, 4.9.0 Sprint 4 [ 101, 102 ]
        tyson Tyson Phillips (Inactive) made changes -
        Rank Ranked higher
        tyson Tyson Phillips (Inactive) made changes -
        Sprint 4.9.0 Sprint 3, 4.9.0 Sprint 4 [ 101, 102 ] 4.9.0 Sprint 3, 4.9.0 Sprint 4, 4.9.0 Sprint 5 [ 101, 102, 103 ]
        tyson Tyson Phillips (Inactive) made changes -
        Rank Ranked higher
        tyson Tyson Phillips (Inactive) made changes -
        Status In Review [ 5 ] Closed [ 6 ]

          People

          • Assignee:
            jonathan Jonathan Reissmueller
            Reporter:
            tyson Tyson Phillips (Inactive)
          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:
              Fix Release Date:
              31/Mar/20

              Time Tracking

              Estimated:
              Original Estimate - Not Specified
              Not Specified
              Remaining:
              Remaining Estimate - 0 minutes
              0m
              Logged:
              Time Spent - 1 day, 2 hours, 2 minutes
              1d 2h 2m

                Agile