MC-42781: [Magento Cloud][Premier Support] Graphql request can add product to cart that is NOT assigned to a website of a multi site store

Author: dhorytskyi

dev/tests/api-functional/testsuite/Magento/GraphQl/Quote/AddSimpleProductToCartSingleMutationTest.php

@@ -199,6 +199,39 @@ public function testAddProductWithWrongQuantity(int $quantity, string $message)
         );
     }
 
+    /**
+     * @magentoApiDataFixture Magento/Catalog/_files/products_with_websites_and_stores.php
+     * @magentoApiDataFixture Magento/Checkout/_files/active_quote.php
+     * @magentoApiDataFixture Magento/Checkout/_files/active_quote_not_default_website.php
+     * @dataProvider addProductNotAssignedToWebsiteDataProvider
+     * @param string $reservedOrderId
+     * @param string $sku
+     * @param array $headerMap
+     */
+    public function testAddProductNotAssignedToWebsite(string $reservedOrderId, string $sku, array $headerMap)
+    {
+        $maskedQuoteId = $this->getMaskedQuoteIdByReservedOrderId->execute($reservedOrderId);
+        $query = $this->getAddToCartMutation($maskedQuoteId, 1, $sku);
+        $response = $this->graphQlMutation($query, [], '', $headerMap);
+        self::assertEmpty($response['addProductsToCart']['cart']['items']);
+        self::assertArrayHasKey('user_errors', $response['addProductsToCart']);
+        self::assertCount(1, $response['addProductsToCart']['user_errors']);
+        self::assertStringContainsString($sku, $response['addProductsToCart']['user_errors'][0]['message']);
+        self::assertEquals('PRODUCT_NOT_FOUND', $response['addProductsToCart']['user_errors'][0]['code']);
+    }
+
+    /**
+     * @return array
+     */
+    public function addProductNotAssignedToWebsiteDataProvider(): array
+    {
+        return [
+            ['test_order_1', 'simple-2', []],
+            ['test_order_1', 'simple-2', ['Store' => 'default']],
+            ['test_order_2', 'simple-1', ['Store' => 'fixture_second_store']],
+        ];
+    }
+
     /**
      * @return array
      */
@@ -246,7 +279,7 @@ private function getAddToCartMutation(
         string $maskedQuoteId,
         int $qty,
         string $sku,
-        string $customizableOptions
+        string $customizableOptions = ''
     ): string {
         return <<<MUTATION
 mutation {
@@ -279,6 +312,7 @@ private function getAddToCartMutation(
             }
         },
         user_errors {
+            code
             message
         }
     }

dev/tests/integration/testsuite/Magento/Checkout/_files/active_quote_not_default_website.php

@@ -0,0 +1,23 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+
+$objectManager = \Magento\TestFramework\Helper\Bootstrap::getObjectManager();
+
+$storeRepository = $objectManager->get(\Magento\Store\Api\StoreRepositoryInterface::class);
+$store = $storeRepository->get('fixture_second_store');
+
+$quote = $objectManager->create(\Magento\Quote\Model\Quote::class)
+    ->setReservedOrderId('test_order_2')
+    ->setStoreId($store->getId())
+    ->setIsActive(true);
+$quoteRepository = $objectManager->get(\Magento\Quote\Api\CartRepositoryInterface::class);
+$quoteRepository->save($quote);
+
+$quoteIdMask = $objectManager->create(\Magento\Quote\Model\QuoteIdMask::class)
+    ->setQuoteId($quote->getId())
+    ->setDataChanges(true);
+$quoteIdMaskResource = $objectManager->get(\Magento\Quote\Model\ResourceModel\Quote\QuoteIdMask::class);
+$quoteIdMaskResource->save($quoteIdMask);

dev/tests/integration/testsuite/Magento/Checkout/_files/active_quote_not_default_website_rollback.php

@@ -0,0 +1,10 @@
+<?php
+/**
+ * Copyright © Magento, Inc. All rights reserved.
+ * See COPYING.txt for license details.
+ */
+
+$quote = \Magento\TestFramework\Helper\Bootstrap::getObjectManager()
+    ->create(\Magento\Quote\Model\Quote::class);
+$quote->load('test_order_2', 'reserved_order_id')
+    ->delete();