How to solve the permission violation issue with the customer accessing the sales order of another customer in the order approval system

in the order approval system the customer as an approver need to have access to the sales order of all the sub-customers under the company. So in the suite commerce standard is not allowed to access the sales order. So we have implemented an extension for that and extended OrderHistory.Model . In the extended model, we give CEO permission for that file example: JJ.OrderApprovalDetail.OrderApprovalDetail.js .

Because of the CEO permission, the customer can access the sales order detail page on the website. We developed the custom page for that we also extended the model file and updated the URL root for adding the order approve function.

Leave a comment

Your email address will not be published. Required fields are marked *