Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
It shouldn't be possible to see other people's invoices.
It shouldn't be possible to see other people's invoices.
Comments
Comment #1
pietervogelaar CreditAttribution: pietervogelaar commentedSo what are you saying? Do you have a question or?
Pieter
Comment #2
theemstra CreditAttribution: theemstra commentedThe problem is that there's no permission check for viewing invoices.
Comment #3
pietervogelaar CreditAttribution: pietervogelaar commentedIt on the TODO list. See TODO.txt in the invoice module. "* Possibility to link an invoice to a site user + page for that user to view his invoices => http://drupal.org/node/346516"
Pieter
Comment #4
theemstra CreditAttribution: theemstra commented