IFLYRESPM-9828

Owned by Sreejith S R (Unlicensed)
Last updated: Feb 26, 2021 by Abdul Rehuman M P (Unlicensed)
1 min read

 

Mandatory Surname Check for Order Retrieval using NDC 17.2 OrderRetrieve Service

Mandatory Surname Check for Order Retrieval using NDC 17.2 OrderRetrieve Service

Effective Patch

JANUARY21 PATCH

APIs Affected

OrderRetrieve

Problem/ Issue

Initially, we were able to retrieve the Order details using the NDC 17.2 OrderRetrieve service with OrderID alone. This was found as a security flaw since Order modification like cancellation, segment deletion can be done by anyone who can use a random OrderID.

Solution

From now onward, Surname will be a mandatory data for a Order retrieval along with OrderID using NDC 17.2 OrderRetrieve service. More Information

Backward Compatibility

LOW- This will not impact any breaking change to the consumption of iFlyRes 17.2 NDC APIs. This change will be enabled only up on request.

Remarks

This change will be access controlled one. Will be enabled for the channels upon request.

Â