Hi @kaigalmane,
Please go to WooCommerce > Status > System Status, click on Get system report, then click on Download for support, attach the file on https://www.file.io/, and finally paste the download link in a reply here (the file will be deleted after the first download, so please don’t try to download it yourself).
I hope you understood the problem. Here is the link to the report. https://file.io/cKSnH1TrwAUE
Thanks for sending system report, @kaigalmane:
I have tested what you described, but I was not able to reproduce it: The customers can only access to the PDF invoices from their own orders, as expected.
That said, if you still think that there is an issue with the documents access, please write us at [email protected], so we can take a look at this further.
I placed an order from account1 and got the invoice https://my-domain.com/wcpdf/invoice/1449/some-id/pdf?my-account=true
Then I placed another order from account2 and got the invoice https://my-domain.com/wcpdf/invoice/1452/different-id/pdf?my-account=true
Both invoices are accessible from both accounts just by changing the Order ID. But then I realized my account2 also has some rights on the website. When I tried from a normal account, it asks for the login. Good.
Thank you for the support.
That makes sense, @kaigalmane:
Please note that users with the admin or shop manager roles can access to all the PDF documents.
