157 results found

1. Promotions - BOGO Improvement

   We are having an issue with a Buy One Get One Free Promo. 

   This promo does work when you just order 1 of the MILW 3697-22 and you get a free MILW 48-11-1865
   BUT if a customer were to order more than 1 lets say 4 for example, it's only still giving them 1 free MILW 48-11-1865 when it should give them 4 free MILW 48-11-1865, since it is a Buy one Get one.

   If I were to walk into a retailer like Home Depot or Lowe’s, or place an order on their websites, I would be able to add four qualifying items and receive four batteries for free, as outlined in my example.

   With all due respect, this type of functionality is fairly common within eCommerce. It would be beneficial to see more forward-thinking development around promotional capabilities to better align with standard market expectations and customer buying behavior.

   We are having an issue with a Buy One Get One Free Promo. 

   This promo does work when you just order 1 of the MILW 3697-22 and you get a free MILW 48-11-1865
   BUT if a customer were to order more than 1 lets say 4 for example, it's only still giving them 1 free MILW 48-11-1865 when it should give them 4 free MILW 48-11-1865, since it is a Buy one Get one.

   If I were to walk into a retailer like Home Depot or Lowe’s, or place an order on their websites, I would be able to add… more

   •  

   3 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Thank you for submitting this request! We have added this item to our backlog for future consideration and prioritization.

2. Budgement Enforcement at Order Level

   Looking to have an option to enforce a budget at the order level. We have customers who aren't looking to approve all orders, but only orders over a certain dollar amount for the Buyer 2 role.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  0 comments  ·  Edit…  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. admin console fill in lists column

   As of now the wishlist columns display "created by" but that is only filled in when created on the website. I would like that field to be filled out when the list is created in the ADMIN console as well. same for the other fields. This will help our sales reps look for lists they have made or who have edited them.

   5 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   Gathering Feedback  ·  2 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. Quote Workflows for Console and Website Users

   Configured Commerce quotes are ok at gathering a quote request, but are terrible beyond that.

   There needs to be the ability for the sales representative or for an admin console user to edit the quote. We often have regional substitutions that are functionally the same item, but we cannot make substitutions to the quote. We also cannot remove a quoted item from the quote. If we were to quote other items but not that one and Propose a quote, the customer cannot remove the unquoted item and can check out with an item with an invalid price. The sales person and the customer requesting the quote do not get notifications on messages requesting clarification. All in all this tool is not robust.

   We realize that our use case scenario is different than many as we have many products that are unpriced for some or many customers who want to use the website as a discovery tool. But even if everything was priced, I feel this change would be beneficial.

   Configured Commerce quotes are ok at gathering a quote request, but are terrible beyond that.

   There needs to be the ability for the sales representative or for an admin console user to edit the quote. We often have regional substitutions that are functionally the same item, but we cannot make substitutions to the quote. We also cannot remove a quoted item from the quote. If we were to quote other items but not that one and Propose a quote, the customer cannot remove the unquoted item and can check out with an item with an invalid price. The sales person… more

   4 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Enhancement Request: OOTB Support for Additional Payment Gateways

   Description: We would like to request an enhancement to include "Robot Payment" and "GMO" as the OOTB payment gateway. Currently, these payment gateways are not available OOTB. Providing OOTB support for these gateways would significantly benefit customers operating in regions where these payment providers are widely adopted.

   Business Justification : These payment gateways are actively used by our client and are critical for their regional payment requirements. Not available OOTB.
   Native or supported integrations would improve adoption of Optimizely Configured Commerce in regions where these gateways are common.

   Requested Enhancement: Include the mentioned payment gateways as the OOTB supported option.

   Impact : This enhancement would enable faster onboarding for clients with region-specific payment needs. Increase platform competitiveness in global and regional markets

   Description: We would like to request an enhancement to include "Robot Payment" and "GMO" as the OOTB payment gateway. Currently, these payment gateways are not available OOTB. Providing OOTB support for these gateways would significantly benefit customers operating in regions where these payment providers are widely adopted.

   Business Justification : These payment gateways are actively used by our client and are critical for their regional payment requirements. Not available OOTB.
   Native or supported integrations would improve adoption of Optimizely Configured Commerce in regions where these gateways are common.

   Requested Enhancement: Include the mentioned payment gateways as the OOTB supported option.

   … more

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. VMI - Add optional fields for display on labels

   Please add optional fields for display when printing labels for Vendor Managed Inventory:
   - Min/Max
   - Bin Location

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Thank you for submitting this request! We have added this item to our backlog for future consideration and prioritization.

   
   

   If there are related requirements such as specific locations where these fields would be expected in relation to existing values please make sure to add to this request.

7. Allow admin to disable hidden lists

   Provide the ability to toggle on/off "Hide List" on the My Lists and List Details. We have customers who are reporting "missing" lists, when in fact they are hidden and it's become a burden for our customer care teams, based on the number of reports we are getting.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   Thank you for submitting this request! We have added this item to our backlog for future consideration and prioritization.

   
   

   Can you advise if you are desiring this ability at the website, or customer level?

8. Improve the processing time of Restriction Group Rebuild step

   I’m seeing only one CPU core was utilized during the execution of the job Rebuild Search Index. As a result the Restriction Group Rebuild step is very slow, even though there are less than 100 items.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   New  ·  1 comment  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Allow Commerce Search v3 for Local Development

   Local debugging for Commerce Search v3 is currently unavailable, and renders the site completely unusable. This is, to put it bluntly, absolutely unacceptable. As far as I can tell, the only workaround presently is to switch to Search v2 for local development. At very least, there should be a way to have the system default to Search v2 when working locally, regardless of what is configured.

   1 vote

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Delete…  ·  Admin →
   How important is this to you?

   Nice to have You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating
   Research & Design  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

   I can confirm that currently Commerce Search v3 does not support Local Development.

   • Until local support is available, partners are currently working from Sandbox environments or if working on non search related activities they may be switching to alternative provider while working locally.

   While the suggestion to automatically fallback to Search v2 during local development is technically possible, it would mask actual system behavior and could lead to incorrect assumptions, missed issues, or inconsistent environment (sandbox vs local). For that reason, we are unlikely going to implement an automatic fallback to alternative search provider and switching search providers will remain a manual action at this time.

   • We fully understand your frustration, and how the inability to debug or run the site locally with Search v3 enabled is a significant disruption.
   • We are actively evaluating options to enable limited local development against sandbox instances, and work is underway to determine what is feasible and the associated timing.

   Please continue to share related impact and feedback and we will be sure to bring that to our teams as they review this request.

   I can confirm that currently Commerce Search v3 does not support Local Development.

   • Until local support is available, partners are currently working from Sandbox environments or if working on non search related activities they may be switching to alternative provider while working locally.

   While the suggestion to automatically fallback to Search v2 during local development is technically possible, it would mask actual system behavior and could lead to incorrect assumptions, missed issues, or inconsistent environment (sandbox vs local). For that reason, we are unlikely going to implement an automatic fallback to alternative search provider and switching search providers will remain a manual action at this time.

   • We fully understand your frustration, and how the inability to debug or run the site locally with Search v3 enabled is a significant disruption.
   • We are actively evaluating options to enable limited local development against sandbox instances, and work is underway to determine… more

10. We need to be either notified or be able to see the Password re-set e-mails being suppressed in at Optimizely

    We need to be either notified or be able to see the Password re-set e-mails being suppressed in at Optimizely

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  3 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Captcha functionality

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
    3. Bot Protection - Challenge suspected bots to confirm user authenticity
    4. Bot detection with javascript to identify headless browsers
    5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
    6. WAF compromised credentials check
    7. Any other WAF rules to protect the website from anonymous usage and attacks

    There are multiple problems if there are no proper security rules in place.

    • Problem-1: Websites are going down – Loss of business and sales
    • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
    • Problem-3: There is a possibility of data mining from our websites if there is no security rules

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we… more
    8 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    2 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

    Thank you for submitting this request! Our team is currently reviewing if and how we may implement this feature, particularly with consideration of our wide client base. We will provide an update once we have completed this investigation.

12. Enable Cloudflare's leaked credentials detection

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    1. WAF compromised credentials check

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
    3. Bot Protection - Challenge suspected bots to confirm user authenticity
    4. Bot detection with javascript to identify headless browsers
    5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
    6. WAF compromised credentials check
    7. Any other WAF rules to protect the website from anonymous usage and attacks

    There are multiple problems if there are no proper security rules in place.

    • Problem-1: Websites are going down – Loss of business and sales
    • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
    • Problem-3: There is a possibility of data mining from our websites if there is no security rules

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    1. WAF compromised credentials check

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
    3. Bot Protection - Challenge suspected bots to confirm user… more
    5 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Bot prevention measures

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    1. Bot Protection - Challenge suspected bots to confirm user authenticity
    2. Bot detection with javascript to identify headless browsers
    3. Any other WAF rules to protect the website from anonymous usage and attacks

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
    3. Bot Protection - Challenge suspected bots to confirm user authenticity
    4. Bot detection with javascript to identify headless browsers
    5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
    6. WAF compromised credentials check
    7. Any other WAF rules to protect the website from anonymous usage and attacks

    There are multiple problems if there are no proper security rules in place.

    • Problem-1: Websites are going down – Loss of business and sales
    • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
    • Problem-3: There is a possibility of data mining from our websites if there is no security rules

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    1. Bot Protection - Challenge suspected bots to confirm user authenticity
    2. Bot detection with javascript to identify headless browsers
    3. Any other WAF rules to protect the website from anonymous usage and attacks

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the… more
    10 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Website Stability via Rate Limiting

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks
    3. Bot Protection - Challenge suspected bots to confirm user authenticity
    4. Bot detection with javascript to identify headless browsers
    5. Captcha functionality - when users initially come into the site or users are starting an order or users are entering credit card information
    6. WAF compromised credentials check
    7. Any other WAF rules to protect the website from anonymous usage and attacks

    There are multiple problems if there are no proper security rules in place.

    • Problem-1: Websites are going down – Loss of business and sales
    • Problem-2: There are many unnoticed attacks, as we know the attacks only after the websites go down
    • Problem-3: There is a possibility of data mining from our websites if there is no security rules

    Please note: this idea required splitting so that various points may be addressed as information becomes available.

    New request:

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of specific countries (Challenge beyond the primary range/limit and block beyond the secondary range/limit)
    2. Basic Rate Limiting - Can we add a rule with rate limiting to block DoS attacks

    Original request:

    Please help with implementing below security features ASAP. There are so many frequent attacks on the website that causes the websites to go down.

    1. Geographical Rate Limiting - Add rules with rate limiting for traffic outside of… more
    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Control Panel Scheduler Must take Time Changes into account without re-scheduling jobs twice a year.

    1) Goals

    • Users can schedule jobs using their local date/time and time zone, and the job will run at the correct absolute instant even across DST and zone changes.
    • This must take into account Daylight Savings time changes in the Spring and Fall
    • The current Opti control panel only allows one time zone to be used (UTC). Need the ability to handle more than one.
    • User should not have to manually re-schedule jobs two times per year when clocks change
    • Admins and integrators can display and manage schedules in any time zone, and any time circumstance.

    2) Functional Requirements

    2.1 Scheduling (User flows)
    • Allow user to pick:
    o Local date (YYYY-MM-DD)
    o Local time (HH:MM)
    o Time zone (IANA with search/autocomplete)
    • Display converted times prominently (Local user view, Tenant admin view, and UTC).
    • Allow recurring schedules with explicit interpretation rules

    3) UI behavior
    • When user selects a time zone, display both the local selected time and the equivalent UTC and the viewer’s local time.
    • Warn users during DST transition windows (scheduling into the "missing hour" or ambiguous hour) and require confirmation/explicit selection where ambiguity exists.
    • Provide a toggle to show times in: “Viewer local”, “Scheduler’s zone (stored)”, and “UTC”.

    4) Edge Cases & DST handling
    • Ambiguous times (fall-back hour): e.g., in many zones 01:30 occurs twice. Require user to choose “first” or “second” occurrence or explicitly pick UTC offset to disambiguate. Persist which one was chosen.
    • Non-existent times (spring-forward): e.g., 02:30 may not exist. Offer to:
    o Shift to the next valid instant, or
    o Ask user to pick an explicit offset, or
    o Reject and request different time — UI should explain.
    • Time zone rule changes after schedule creation: If a zone's rules change (government changes DST), previously computed UTC times might shift.
    • Options:
    o Recompute next occurrences dynamically at runtime using the current tzdb (and record changes), or
    o Freeze behavior to the tzdb version at creation (store tzdatabaseversion) and only change after administrative approval. (Prefer dynamic recompute for user expectations, but keep audit trail.)
    • Cross-tenant or cross-user views: always display a note when converting times indicating which tz rules were used and show both local and UTC values.

    ---

    5) Scheduler / Execution design
    • Scheduler service runs in UTC. Jobs are queued for the exact scheduledatutc.
    • For recurring jobs, a separate recurrence manager:
    o When a run completes (or is consumed), compute and persist the next run(s) in UTC.
    o Optionally precompute N future runs to reduce runtime computation and to detect DST/ambiguity early.

    ---

    6) API & Client guidance
    • Clients must send the IANA tz id when scheduling. If omitted, reject with an error (no implicit server-local timezone).
    • Provide a time zone autocomplete endpoint (GET /api/time zones ?q=Chicago) powered by a canonical list from tzdata.
    • Provide helper endpoints for preview:
    o POST /api/schedules/preview — returns UTC instant(s), localized displays for multiple viewer zones, and any DST warnings.

    1) Goals

    • Users can schedule jobs using their local date/time and time zone, and the job will run at the correct absolute instant even across DST and zone changes.
    • This must take into account Daylight Savings time changes in the Spring and Fall
    • The current Opti control panel only allows one time zone to be used (UTC). Need the ability to handle more than one.
    • User should not have to manually re-schedule jobs two times per year when clocks change
    • Admins and integrators can display and manage schedules in any time zone, and any time… more

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    Gathering Feedback  ·  1 comment  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Reintroduce or Provide Alternative Method to Restrict Access to the Admin Console in Configured Commerce (V3)

    As part of our recent internal security audit, we identified a vulnerability related to unrestricted access to the Optimizely Configured Commerce Admin Console.

    In the legacy V1 architecture, administrators could restrict Admin Console access by domain or IP range using configuration updates (as described in the Optimizely documentation: https://docs.developers.optimizely.com/configured-commerce/docs/restricting-access-to-admin). However, in the V3 architecture, this capability is no longer supported or configurable within the managed environment.

    Our support engagement (Ticket #1788512) confirmed that this feature was not migrated to V3 due to complications with the impersonation feature and has since been deprecated. As a result, customers currently have no configuration-based control over Admin Console access restrictions.

    We request an enhancement to reintroduce or provide an alternative mechanism for controlling and limiting access to the Admin Console, ideally at the domain, IP, or network level.

    As part of our recent internal security audit, we identified a vulnerability related to unrestricted access to the Optimizely Configured Commerce Admin Console.

    In the legacy V1 architecture, administrators could restrict Admin Console access by domain or IP range using configuration updates (as described in the Optimizely documentation: https://docs.developers.optimizely.com/configured-commerce/docs/restricting-access-to-admin). However, in the V3 architecture, this capability is no longer supported or configurable within the managed environment.

    Our support engagement (Ticket #1788512) confirmed that this feature was not migrated to V3 due to complications with the impersonation feature and has since been deprecated. As a result, customers currently have no… more

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Disable Weak TLS Cipher Suites (CBC-mode Ciphers) in Managed Commerce Environments

    As part of a recent internal and third-party security assessment (conducted by Optiv Security), our organization identified that our Optimizely Configured Commerce production environment (www.whitecap.com) currently supports weak TLS cipher suites, including CBC-mode ciphers.

    These ciphers are considered outdated and potentially vulnerable to known cryptographic attacks (e.g., Lucky 13 and BEAST). Security best practices and compliance frameworks (such as PCI DSS, NIST SP 800-52r2, and OWASP guidelines) recommend disabling weak or deprecated cipher suites and enforcing stronger ones such as AES-GCM or CHACHA20_POLY1305 with TLS 1.2+ only.

    During our support engagement (Ticket #1789304), the SRE team confirmed that removing weak ciphers is not currently supported within the managed Optimizely infrastructure. We request that Optimizely provide customers with the ability to:

    Disable weak cipher suites (especially CBC-mode ciphers) at the environment level.

    Enforce modern cipher configurations (AES-GCM or CHACHA20_POLY1305).

    Optionally, provide visibility into the active cipher suite list for validation and audit purposes.

    As part of a recent internal and third-party security assessment (conducted by Optiv Security), our organization identified that our Optimizely Configured Commerce production environment (www.whitecap.com) currently supports weak TLS cipher suites, including CBC-mode ciphers.

    These ciphers are considered outdated and potentially vulnerable to known cryptographic attacks (e.g., Lucky 13 and BEAST). Security best practices and compliance frameworks (such as PCI DSS, NIST SP 800-52r2, and OWASP guidelines) recommend disabling weak or deprecated cipher suites and enforcing stronger ones such as AES-GCM or CHACHA20_POLY1305 with TLS 1.2+ only.

    During our support engagement (Ticket #1789304), the SRE team confirmed that… more

    1 vote

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. Export product list from a category

    In PIM: I want to export all products that are assigned in a certain category. For example, I have category A with 300 products, and I want to export these 300 products in category A. As for now, when I'm in category A in PIM and click on "products" I get the listed products assigned to category A, BUT I can't export them in a excel list or other files types.

    •  

    2 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Many customers change their SKU and it's not really supported in Configured Commerce

    We have several client which rename SKUs in their ERP instead of deactivating and create a new one for multiple reasons. Recently one of them ask us to create a "Master UID" for them to map and update our products, but this field is internal only and not visible to the customers, so it's an internal ID used between the ERP, PIM and Configured Commerce to update the product.

    Can such a field be added and could be used as an alternate natural key to simplify everything? Seems to us like a common issue.

    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating
    Gathering Feedback  ·  AdminSara Winter (Principal Product Manager, Optimizely) responded

    Thank you for submitting this request! I can confirm that this would be a significant architectural change to implement and is not something we would be able to add to the roadmap at this time.

    
    

    We can leave this enhancement request open in order to receive related feedback, but we do not have plans to add this feature at this time.

20. PIM - History details not shown for latest changes on produts

    I'm not able to see the latest change history details for some products.
    There are two panels with history lists, one to the left and one in the middle under the "history" tab.

    The list to the left only shows the latest change on the products but I'm not able to click on it to see the actual change that has been made. I can only see the product status and the date of the change.

    On the other hand, the history list in the middle has a drop down where I can click on the different history versions and see the exact change that has been made on the product. I wish that the history list to the left also had this kind of drop down, or similar.

    This issue results in us not being able to keep track and back-track on the LATEST changes that's been made on a product.

    I'm not able to see the latest change history details for some products.
    There are two panels with history lists, one to the left and one in the middle under the "history" tab.

    The list to the left only shows the latest change on the products but I'm not able to click on it to see the actual change that has been made. I can only see the product status and the date of the change.

    On the other hand, the history list in the middle has a drop down where I can click on the different history versions and… more

    •  

    0 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    New  ·  0 comments  ·  Third-party Library Allow Listing  ·  Edit…  ·  Delete…  ·  Admin →
    How important is this to you?

    Nice to have You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating