How do you secure your Magento store? It's not just one thing. It's dozens of things. This post catalogs a set of actions you can take that will enable you to prevent the most common attacks on Magento sites, or detect it quickly if one succeeds.
There are a lot of blog posts about Magento securit...
Presented by David Deppner
MagentoLive Australia, February 22, 2018
The Google Tag Manager (GTM) implementation in Magento can do amazing things to simplify the lives of digital marketers. You don't need to write custom code, modify themes, or install extensions in order to set up conversion track...
Conversion tracking is easy to set up in Magento Commerce using the built-in Google Tag Manager implementation. Google Tag Manager (GTM) is also useful for other common goals like setting up A/B testing, or inserting some javascript into certain pages on your site. In addition, if you set up GTM s...
Here's a quick reference to help Magento administrators when they're configuring what admin screens should be enabled for various business roles. For the most part, the permission (aka "Resource") required for access to each screen corresponds to the path of the admin screen. But this isn't always the case. There are a number of screens that have been moved around, such as "Customers > Customer Groups" so the name of the permission no longer matches the location of the backend screen. Also, a number of permissions are used for multiple screens. For example, the "Catalog" permission is used for "Catalog" and "Catalog > Inventory".
I've been working with the Magento 2 REST API off and on over the past two years now. One of the hassles with the API is just figuring out what permissions are required to access a particular API endpoint. When setting up access for API users, I have seen some Magento 2 administrators just take the...
