Magento 2.x Feature Requests and Improvements

Please allow "Purchase on Account" to be an available payment method when placing orders in the Admin on behalf of a customer who does not want to enter an order online.   I'm shocked that Magento does not allow orders to be placed against a company's credit limit while placing orders through the Admin. Many B2B customers will simply want to send in a PO rather than ordering through our frontend, but lacking this feature we have no way to accept that PO and account for it on the company's credit limit.   What's the use of this credit limit otherwise??? ... View more

Firebase Push Notification module: This module is very frequently used with mobile applications. We can provide features listed below: Admin area to configure firebase authentication key. Rest API to save device token when someone gets logged-in with mobile application. Send push notification to mobile devices on various events like new order, order status change, abandoned cart etc. Send bulk notifications for newsletters and marketing campaigns. Save the list of notifications sent to customers and allow resend the notifications. I have already prepared a sample module and planing to publish it on Magento Marketplace. ... View more

Issue: When we tried to update the expiry date of a gift card; after extending the validity of any expired gift card, customers are able to apply them on frontend. However, as the status remains as 'Expired', it causes an issue when customers checkout with PayPal. The gift card is automatically removed on PayPal and the subtotal returns the amount without discount (which differs from what the customers see on the frontend which is with the discount).   Feedback from Magento Support: We contacted Magento Support and was asked to submit it as a new feature as this "looks like the expected behaviour for expired Giftcards. There could be other dependencies as to why it does not change the status of already expired codes." ... View more

At the moment Adobe Live Search for Magento only supports searching for products. I'd like to suggest it be extended to support searching for CMS page content as well. Our website has lots of content related to our products and it would be great to have that content show up within the search results for customers to find. Our current search provider Algolia can serve up CMS content results along with products in the same search query. In the search pop up, I'd like to see CMS search results in the left column and products shown in the right.   In addition, it would be great if Live search could be extended to support indexing of 3rd party extensions for additional searchable content. For example, my company sells books. We created a custom module that databases authors who wrote the books we sell. This database is displayed to customers on the front-end of the site. Each author has page with their biography and a list of active products. Authors are also linked to from the product page. I'd love to be able to create a custom Live Search extension the would allow our authors to be searched on by name.   Another example is Blog software. We use a blogging extension provided by a premium Magento partner and having their blog content showing up within site search would be great as well.  ... View more

Feature request from MrSena, posted on GitHub Jul 21, 2016 Hi! I am develop integration with ERP. But have many problem with import large product catalog to Magento (2.1 from composer metapackage.) REST API Product create very slow - import one thousand products more 15 min. (post request to /rest/V1/products). Internal csv import work fast, but I can't start him remote. Also this way, there is no way to create the attributes and attribute_sets. Solve the problem with the speed REST API, please ... View more

Feature request from Khaleel, posted on GitHub Aug 12, 2016 Hi Where do I begin to vent my frustrations with this platform? Firstly I will bring to your attention this Stackoverflow bounty which no one from the Magento Community gave an answer for that I a hoping will garner here: http://stackoverflow.com/questions/38589283/a-faster-route-to-deploying-static-content-in-magento-2-dev-to-live-etc?noredirect=1#comment65177020_38589283 Why is it that the Magento Team thought it was acceptable to turn a live website into Maintenance mode to carry out a deployment? Our company makes serious money and it is just - absurd - to consider ever placing our site in downtime (at any time or day). We literally ship our code to git and then pull on the live server and then deploy static content and this takes an incredible amount of time. Just this week, our developers made a few mistakes and we had to re-deploy twice. 45 mins of no sales. Clearly this is not a solution. There must be something were not doing correctly; but your own documentation, recommends it. @alankent who says 'I am not a frontend dev' Clearly not. Otherwise you would have chosen Sass and dropped the insane idea of Magento UI, which no one really knows what it is. And then further you would have scrapped RequireJS and all the insane (not SEO friendly) KnockoutJS bloat even on the cart. Please can you answer regarding this. It is been raised across the web on many threads on Stackoverflow which my bounty failed and even on this post: https://github.com/magento/magento2/issues/2104 other devs see the insane feature of this. Why is it sooooo slow to make changes to Less and JS even in a developer mode node. You have to recompile files (no Livereload; which I get people not a fan of) but seriously? Make a padding or margin change; delete all var folders, re compile static files for all languages and then run grunt to generate less etc - seriously? ALL our Front End Engineers are strong with JavaScript and CSS and most are (including me) previously Back End Developers. It is insane. Please can this be addressed? Gulp and Grunt is one argument but the process of static deploy on development mode is one thing - a live environment? Seriously? ... View more

Feature request from sonumartolia, posted on GitHub Nov 01, 2015 Can Magento have one more out of the box feature for creating a virtual product for booking, reservation or rentals service ? ... View more

Feature request from paales, posted on GitHub Aug 03, 2016 I want to have all product information imported but I want to be able to override the description of a certain product, but the prices and stock should import like normal. Just like the new core config values, it would be nice to have a scope above the default scope. This would solve the problem that a Merchant needs to overrides the values on each store-view (which is undoable with a Multi Store Setup). If the Use Import Values is unchecked the Merchant is able to change the value. A new flag gets created in a new catalog_product_import_export_overrides (or some other table) table. When importing the system checks this table to skip certain import-values. ... View more

When creating tables in Module/Setup/InstallSchema.php I would like "Magento\Framework\DB\Ddl\Table.php" to support the JSON data type as it has its advantages. For DBs that do not have a JSON data type, they can default to text.   At the moment I need to add my column manually to enable the usage of the JSON data type. $sql = <<<EOT ALTER TABLE my_table ADD COLUMN column_name JSON NOT NULL AFTER a_table_column; EOT; $connection->query($sql);   ... View more

Support for native html lazy loading tag in templates aug 2019   https://www.searchenginejournal.com/google-chrome-will-soon-support-lazy-loading-at-the-browser-level/321211/   Update default grid layouts? Update non-core sale images like upsell and crosssell?   ... View more

Hi -   I am suggesting that there should be a report to review the usage of a cart price rule specifically when no coupon code is configured for the rule.   This would be very similar to the existing "coupon report" (Report > Sales > Coupons) [ Coupons Report | Adobe Commerce 2.4 User Guide (magento.com)] where you could specify cart price rule(s) but it would not show the data by "coupon code".   We have cart price rules that discount the price of an item based on the qty purchased of that item.  The promotion is triggered for all customers and no coupon code is required.   We would like to be able to report on this cart price to see how often it was used and sales metrics, exactly how the data is displayed in the existing coupon report.   Thank you.    ... View more

With all the data-breaches and insecurity on the internet, it would be helpful if Magento enabled FIDO strong-authentication as a standard feature to protect user accounts from getting hacked.  Savvy users can then choose to protect themselves with a FIDO Authenticator instead of just userid/passwords.   FIDO is an industry-standard security protocol for web-applications, currently enabled on sites like Google, Facebook, SFDC and many other sites.  It will soon be standardized by the W3C for WebAuthentication.  But, by having Magento include it as a standard feature, it will enable one of the strongest authentication protocols on the market for Magento sites and their customers.    We will be happy to provide some source-code to enable this - we've already implemented the core protocol into Magento 2, but since we're not Magento experts, we'd ideally like to see Magento include/adapt it into their core product.    Let me know how we can help further.  Thanks. ... View more

Currently if a company Admin creates a requisition list , he can not share that requisition list with the other users. Also if some sub user creates requisition list then that is not even available to Company admin even if Company has all rights. So, it seems just like requisition list, what is the importance of using requisition list in B2B. how it is important from B2B perspective. I feel requisition list should be shared among the sub users and company admin should have rights to update requisition list of sub users. ... View more

When using the bulk product update there should be a warning for how many products are selected - "Are you sure you want to update [X amount/selected] of products?"   ... View more

We always run into errors when including "additional_attributes" column because one of our custom attributes uses commas/description-type box. Changing the delimiter is not a good solution as it also means updating it on your machine. Our CSV's are usually transferred to multiple people and should always be ready to go with comma delimiters. We would like Magento 2 to use Magento 1's system of separating each attribute into it's own column. The importer isn't very useful for bulk product uploading if our most important attributes need to be omitted and we've resorted to a Firebear Importer module. Could this be something a future version of M2 fixes? This would avoid a lot of headache and make a much more readable CSV product export. ... View more

See https://github.com/magento/magento2/issues/6709  Thanks ... View more

I believe the customer group allows about 50 characters. But now only show 10 or 12 characters.   Please assist to lengthen the combo box (At least 25 characters, from my point of view)     ... View more

We are using the magento 2.3.3 version with multiwebsite setup also we are using the MSI concept for inventory management. We came to following scenario where both websites are using same SKUs and handling for backorder is different on each website. Ex: website1 - Allow backorder website 2 - Not allow backorder Since by using MSI concept  the inventory can be handled at website level, it would be good to provide an option in core magento that backorder feature also can be handled at website level instead of global level.  Appreciate if you can pick this idea and provide a path or implement in future releases. Thank you. ... View more

Command injection vulnerabilities take two forms: - An attacker can change the command that the program executes: the attacker explicitly controls what the command is. - An attacker can change the environment in which the command executes: the attacker implicitly controls what the command means. In this case we are primarily concerned with the second scenario, the possibility that an attacker may be able to change the meaning of the command by changing an environment variable or by putting a malicious executable early in the search path. 1.Applications should avoid incorporating user-controllable data into operating system commands. 2.Use library calls rather than external processes to recreate the desired functionality. 3.Ensure that all external commands called from the program are statically created For more information refer : https://www.owasp.org/index.php/Testing_for_Command_Injection_(OTG-INPVAL-013)   ex : $output = shell_exec($cmd); shell_exec() function used in multiple places. Example code path : vendor/laminas/laminas-console/src/Adapter/Virtual.php (Line: 171) protected function switchToUtf8() { shell_exec('mode con cp select=65001'); } and few other vendor files.   CWE Code : CWE-77 ... View more