Page 1 of 1

Staff-only fields exposed to customer

Posted: Mon Mar 06, 2023 5:59 pm
by Squirt8494
Hello, it's me again.

I have a custom field that is set to staff-only.

Image

Seems that these fields are unintentionally exposed to the customer in the 'print' function they can access, from the cust view.

Image

Whoops?

Re: Staff-only fields exposed to customer

Posted: Mon Mar 06, 2023 6:04 pm
by Klemen
This happens because you are still logged in as a staff/administrator when printing from the customer side.

If you open the customer side on a different computer (or in a private browser window, or if you log out of Hesk first), none of those fields will show.

Re: Staff-only fields exposed to customer

Posted: Mon Mar 06, 2023 6:08 pm
by Squirt8494
Oh jeez, I feel stupid... apologies! Confirmed, it works as you say.

Re: Staff-only fields exposed to customer

Posted: Mon Mar 06, 2023 6:13 pm
by Klemen
No worries, it was a valid concern and we do take all such reports seriously :D