From 9ade056a53ed66c283a2383ccd62c559f7fcc74e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jos=C3=A9=20Oliveira?= <josepfo.w@gmail.com>
Date: Wed, 3 Mar 2021 21:24:04 +0000
Subject: [PATCH] fix: prevent the block action on server-side

---
 lib/new-admin/graphql/schema.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lib/new-admin/graphql/schema.js b/lib/new-admin/graphql/schema.js
index fd50b723..10c40245 100644
--- a/lib/new-admin/graphql/schema.js
+++ b/lib/new-admin/graphql/schema.js
@@ -420,7 +420,8 @@ const resolvers = {
     resetAccounts: (...[, { schemaVersion }]) => settingsLoader.resetAccounts(schemaVersion),
     setCustomer: (root, args, context, info) => {
       const token = context.req.cookies && context.req.cookies.token
-      return customers.updateCustomer(args.customerId, args.customerInput, token)
+      if (args.customerId !== anonymous.uuid) return customers.updateCustomer(args.customerId, args.customerInput, token)
+      return customers.getCustomerById(args.customerId)
     },
     saveConfig: (...[, { config }]) => settingsLoader.saveConfig(config)
       .then(it => {