Deeplink in Emails show Catering Items which the user cannot order
The deep link shows EVERYTHING what is available,even when you cannot order it, because cut-off time or notification time is over. This is connected to the escalation we had regarding C-Level items.
Request: Intelligent deep link.
-
Katja Anacker
commented
Implement Intelligent Deep Link Logic to Hide Unavailable and Restricted Items
On behalf of Allianz and our global user base, we would like to raise a follow-up concern directly connected to the previously reported escalation regarding C-Level item visibility.
Currently, the deep link displays all available items in the catalogue — regardless of whether they can actually be ordered. This includes items that are unavailable due to:
Cut-off time having passed
Notification time having expired
Items restricted to specific user groups (e.g. C-Level exclusive items)
This means standard users are exposed to items they should never see or interact with, which directly contributed to the escalation we experienced around sensitive C-Level content and pricing.Requested Enhancement:
Introduce an Intelligent Deep Link that dynamically filters the catalogue based on the following criteria:
- Time-aware – Items past their cut-off or notification time are automatically hidden, not just greyed out or marked as unavailable.
- Permission-aware – Items restricted to specific roles or groups (e.g. "Admin Only" items) are not displayed to unauthorised users via the deep link.
Business Impact:The current deep link behaviour bypasses visibility controls and exposes sensitive items and pricing to unintended audiences. This is a direct security and confidentiality risk, as evidenced by the C-Level escalation. An intelligent, context-aware deep link would close this gap and ensure a consistent, controlled user experience.