Restricting reviews

Vendors can receive reviews from registered or guest customers by default. If you want reviews to only be left by registered (logged in) customers, restrict the shop review route:

# config/packages/security.yaml
security:
    access_control:
        # ...
        - { path: "%sylius.security.shop_regex%/.*/reviews/new", role: ROLE_USER }