Staff-only fields exposed to customer

[Squirt8494]

Hello, it's me again.

I have a custom field that is set to staff-only.



Seems that these fields are unintentionally exposed to the customer in the 'print' function they can access, from the cust view.



Whoops?

[Klemen]

This happens because you are still logged in as a staff/administrator when printing from the customer side.

If you open the customer side on a different computer (or in a private browser window, or if you log out of Hesk first), none of those fields will show.

[Squirt8494]

Oh jeez, I feel stupid... apologies! Confirmed, it works as you say.

[Klemen]

No worries, it was a valid concern and we do take all such reports seriously