It shouldn't be possible to see other people's invoices.

Comments

pietervogelaar’s picture

pietervogelaar commented

So what are you saying? Do you have a question or?

Pieter

theemstra’s picture

theemstra commented

The problem is that there's no permission check for viewing invoices.

pietervogelaar’s picture

pietervogelaar commented
Status: Active » Closed (duplicate)

It on the TODO list. See TODO.txt in the invoice module. "* Possibility to link an invoice to a site user + page for that user to view his invoices => http://drupal.org/node/346516"

Pieter

theemstra’s picture

theemstra commented
Version: 6.x-1.0 » 7.x-1.x-dev
Issue summary: View changes