[Issue] The cashier can view the admin orders

[Moaaz-Briek]

Describe the bug
The cashier can view the admin orders, there are no restriction.

bandicam.2023-06-05.14-52-12-576.mp4

To Reproduce
Steps to reproduce the behavior:

1. Sign in with admin role, then place an order.
2. Go to orders to see the orders list.
3. Logout.
4. Sign in as cashier, Go to Orders => Orders List, You will see the last order assigned by admin

Expected behavior
The cashier should only see the orders created by himself, and The admin can view all orders.

Another Problem
When we go to POS and click on Customers Tab, You will see all orders created by anyone for that customer, which is another problem, because the cashier can also view admin orders for that customer.

bandicam.2023-06-06.11-53-04-425.mp4

Environment:

• NexoPOS 4.8.17

[Blair2004]

Hi,
Thank you. Indeed, this should be a problem.

[Blair2004]

This must be added as a permission on v5

[Moaaz-Briek]

Hello Blair
Great to hear that