Website Restriction Features for SuiteCommerce Implementation

TL;DR Opening

You can enhance security for your SuiteCommerce website by implementing access restrictions. By default, access to your site is open, but you can configure settings to restrict access to logged-in users or control visibility of pricing information based on user roles, enhancing the security for B2B transactions.

How Can You Restrict Access to Your Entire Site?

You can configure your site to restrict access to only registered and logged-in users. This is particularly beneficial in B2B environments where partners need secure access. Here’s how to set it up:

1. Navigate to Commerce > Websites > Website List.
2. Click Edit next to the website you wish to restrict.
3. Go to the Shopping tab and find the Registration Page section.
4. Check the Password-protect Entire Site box.
5. Choose one of the following options from the Type of Customer Registration list:
   • Existing Customers Only: Only customers with account access can complete checkout.
   • Required: New customers must register to access the site, creating a record in NetSuite even if the purchase isn't completed.

Note: If you are using a pre-Vinson version of SuiteCommerce Advanced, refer to alternative configuration steps.

How Can You Restrict Access to Pricing Information?

Controlling who sees your product pricing can be accomplished in two ways: Personalized Catalog Views (PCV) or requiring login for pricing. Here’s how each option works:

Personalized Catalog Views (PCV)

This feature allows different visitors to access specific items based on their permissions. With PCV, you can control whether users can buy items, see item details, or only view the item descriptions.

Require Login for Pricing

This simpler method hides pricing from unregistered users while allowing them to browse the site. If a user isn't logged in, instead of seeing prices, they will receive a prompt to log in, thus encouraging them to register. This option is effective for keeping prices confidential from competitors and pushing for user registrations.

Steps to Restrict Access to Pricing Information

1. Go to Commerce > Websites > Website List.
2. Click Edit next to the specific website.
3. Access the Shopping subtab.
4. Check the Require Login for Pricing box.

Note: If you have restricted access to your entire site, the Require Login for Pricing option will not apply.

To setup for pre-Vinson versions:

1. Create a custom module that depends on the backend Configuration object.
2. Update the loginToSeePrices property in your custom module to true.

Key Considerations

• Implementing these access restrictions can help protect sensitive information and enhance your site's security posture.
• Be aware that while password protection helps, savvy users may still access API endpoints if they know the URL.
• Always keep the user experience in mind—ensure your login and registration prompts are user-friendly to encourage sign-ups while securing your site's data effectively.

Who This Affects

• Administrators: Responsible for configuring website security settings.
• Developers: May need to implement custom modules for advanced configurations.
• B2B Customers: Users requiring specific access to pricing or product availability based on their account status.

Key Takeaways

• SuiteCommerce allows for fine-grained control over website access and pricing visibility.
• Websites can be restricted to registered users, enhancing security for sensitive information.
• Different strategies exist for controlling pricing visibility based on user registration status.
• User experience considerations are critical in implementing access restrictions effectively.

Source: This article is based on Oracle's official NetSuite documentation.