[TYPO3-shop] tracking code

[Igor Pstyga]

Franz Holzinger wrote:
> Hello Igor,
> 
> 
>> Am I right, anybody shopuser can see the order details if he know the
>> tracking code?
>> How I can protect this information from other users?
> 
> 
> No, the shop admin panel is only shown if a backend user has been logged in.
> 
> 
> - Franz

I didn't wrote about admin panel. I wrote about order details for FE 
users. There is a link like 
http://site.com/index.php?id=13&tracking=order_9-2a37e5d in the 
order_list template. In the orders list page FE user can see only his 
orders and can see details of these orders. But when I know the code of 
the other orders, I can see his details ( 
http://site.com/index.php?id=13&tracking=order_OTHER_CODE )...

-- 
Regards,
Igor