Methods in the SOAP API that change a company’s settings now require the calling user to be an admin of that company. Previously any user linked to the company could change these settings.
Affected methods
These methods now respond with ERROR: NO RIGHTS TO CHANGE SETTINGS when the calling user is not a company admin:
-
company_invoice_receiving(all SOAP API versions) enable_operatorscan_account_disablescan_account_order
If your integration calls any of these, make sure the user behind the call has admin rights to the company. Existing calls made by company admins are unaffected.
Disabled method
company_order_receiving no longer changes anything and returns ERROR: API METHOD NOT SUPPORTED. Maventa no longer handles S-EDI orders, so the setting the method used to toggle has no effect.