magento/graphql-ce#486: Add customer account validation in Quote operations

Author: lenaorobei

app/code/Magento/QuoteGraphQl/Model/Cart/GetCartForUser.php

@@ -39,6 +39,8 @@ class GetCartForUser
      * @param MaskedQuoteIdToQuoteIdInterface $maskedQuoteIdToQuoteId
      * @param CartRepositoryInterface $cartRepository
      * @param StoreManagerInterface $storeManager
+     * @param GetCustomer $getCustomer
+     * @param ContextInterface $context
      */
     public function __construct(
         MaskedQuoteIdToQuoteIdInterface $maskedQuoteIdToQuoteId,
@@ -62,6 +64,9 @@ public function __construct(
      */
     public function execute(string $cartHash, ?int $customerId): Quote
     {
+        /* verify customer is confirmed and not locked  */
+        $this->getCustomer->execute($this->context);
+
         try {
             $cartId = $this->maskedQuoteIdToQuoteId->execute($cartHash);
         } catch (NoSuchEntityException $exception) {

dev/tests/api-functional/testsuite/Magento/GraphQl/Quote/Customer/GetCartTest.php

@@ -223,7 +223,6 @@ public function testGetCartWithNotExistingStore()
     }
 
     /**
-     * _security
      * @magentoApiDataFixture Magento/Customer/_files/customer.php
      * @magentoApiDataFixture Magento/GraphQl/Catalog/_files/simple_product.php
      * @magentoApiDataFixture Magento/GraphQl/Quote/_files/customer/create_empty_cart.php