Editorial question13.4K views1,131 votes0 answers2,036 following
AI-generatedWooCommerce REST API consumer key missing dedicated read‑only order notes scope
Administrators aim to issue a WooCommerce REST API consumer key that can retrieve order notes but cannot modify any order data. Currently the API grants access to order notes through the same 'shop_order' read capability that also underpins the edit_shop_orders permission, so a key intended for read‑only note viewing inadvertently allows write operations whe