2021-05-10-validate-order-create-discount-privilege-and-generally-in-proxy-endpoints.md

title	issue	author	author_email	author_github
validate order create discount privilege and generally in proxy endpoints	NEXT-15171	d.neustadt	[email protected]	dneustadt

Core

• Added AdminSalesChannelApiSource to pass original context to AclWriteValidator. Fixes an issue where priviliges would not be validated as a new SalesChannelContext is created in SalesChannelProxyController which would lead to the context source not being an instance of AdminApiSource, ultimately circumventing the validation.
• Added CommandAclValidationEvent to dispatch acl commands for additional validation
• Added CreditOrderLineItemListener to check for order:create:discount on acl write command of credit order line items