Thursday, September 27th, 2012
Earlier today, we released changes to Access Manager roles and Order Manager, and a new enhancement for Store Editor. The changes to Access Manager roles and Order Manager were previously communicated to all Yahoo! Merchant Solutions and Yahoo! Store merchants by email on September 5, 2012, and again on September 24, 2012.
Access Manager Role Changes
Changes released to Access Manager roles today provide merchants with greater control over what order and payment information is made available to users of your Yahoo! Merchant Solutions or Yahoo! Store account. Here’s what’s changed:
Order Processor role:
The Order Processor role no longer has access to customer credit card number information beyond the last four credit card digits, or to payment processing actions. Users with the Order Processor role on September 27 have been transitioned to the new Payment Processor role to retain existing access to payment processing actions.
New Payment Processor and Credit Card roles:
Two new roles — Payment Processor and Credit Card — have been added to Access Manager:
Payment Processor provides access to only the last four digits of customer credit card numbers. This role allows access to payment processing actions and all other features available to Order Processors. Users who require the ability to process sales, voids, credits, re-authorizations, and other payment actions should be assigned this role.
Credit Card provides access to full customer credit card numbers, visible only on the order detail page in Order Manager. (Printed orders no longer include full credit card numbers.) This role allows access to payment processing actions and all other features available to Order Processors. We recommend restricting the Credit Card role to only those users who need this access to perform a business operation such as offline credit card processing.
Important information for Owners and Administrators
Full credit card numbers are no longer visible to users with the Owner or Administrator role, unless they also have the Credit Card role assigned. Users with the Owner or Administrator role may assign themselves the Credit Card role if viewing full credit card numbers is required. Owners and Administrators continue to have access to all other features.
We recommend reviewing your list of users in Access Manager. While Order Processor users have been transitioned to the Payment Processor role, some users may not require payment processing capabilities. Learn how to assign user roles.
Order Manager Changes
As noted above, only users assigned the new Credit Card role can view full credit card numbers associated with orders, and this information is visible to these users only on the order details page.
Printed order formats no longer include full credit card numbers. This change applies to all users who use the print order feature, including users assigned the Credit Card role.
The batch review feature no longer displays full credit card numbers to any user. Only the last four digits are shown.
Confirm Publish Step Option for Store Editor
A new Confirm Publish Step option has been added to the Controls section of Store Editor. This option is disabled by default. When enabled, it adds a step to confirm that you wish to publish your store, to help prevent unintended publishes. When enabled, this option is used for both Publish Changes and Publish All publishes. Learn how to enable this option.