It is related however the standard install of ezPublish 3.9 has the "My Profile" functionality in place during installation. It does not however work out of the box as there are no roles to allow a user to see only their orders.
I did look at the contribution but decided it was better top fix ez than add another extension. Also the extension works slightly differently to that of ez 3.9
But I am not sure this change anything. You are adding a new function that does not have any limitation. My feeling is that the function you are adding do exactly the same as before.
When I had to deal with this problem on a 3.6.x I did edit the customerorderview.php file and checked the user_id and compared it with the one passed in parameter.
If current_user was an administrator or the user who passed the order, then I allowed the display. Else I raised an error.
It's quite unbelievable that this issue is not fixed with 4.0.1.
Nobody wants any user to see the orders of other users (except for administator users), I guess. So why is the limitation of orderlist to orders of the current user not the default setting?
think it isn't normal... using ez4.1.1 and no change or extension ran..
I try to change the module.php and add the role without success [still no access]
I try to install the ezorder extension and add the ExtensionAutoloadPath[]=ezorder without success My last try to install http://projects.ez.no/tc_mypurchases to use it in in user/edit.tpl is without success too
You must be logged in to post messages in this topic!