I placed an order from account1 and got the invoice https://my-domain.com/wcpdf/invoice/1449/some-id/pdf?my-account=true
Then I placed another order from account2 and got the invoice https://my-domain.com/wcpdf/invoice/1452/different-id/pdf?my-account=true
Both invoices are accessible from both accounts just by changing the Order ID. But then I realized my account2 also has some rights on the website. When I tried from a normal account, it asks for the login. Good.
Thank you for the support.
I hope you understood the problem. Here is the link to the report. https://file.io/cKSnH1TrwAUE