Hello,
I have a user who is a wordpress 'customer' role, and is flagged as an SK 'Sales Agent' who can access the standard 'backend' of wordpress/woocommerce and view 'orders'. This is working as intended, he can only view orders previously assigned to him and CANNOT create new orders (since he is a 'customer' and not a 'shop manager' or above). My issue is that if this user has an order that is open and has not yet been settled (payment not yet complete), he is able to edit the base price of items in the order details, generating a 'coupon' line.
In my 'Agent Capabiltiies' settings it is disabled that agents can edit prices- but using the backend of WP may bypass those controls. Is there a fix to restrict that access?
Thank you