We’ve detected a visibility issue in the B2B system related to parent and subaccount relationships.
When we create a subaccount and assign it to a parent account, everything works correctly — the parent account can see the subaccount and view its orders and receipts, as expected.
However, when we create multiple subaccounts (for example, 3, 4, or 5) under the same parent account, a problem appears:
➡️ All subaccounts can also see the receipts of the other subaccounts linked to the same parent account.
This should not happen.
Expected behavior:
The parent account should be able to view all orders and receipts from all its subaccounts.
Each subaccount should only be able to see its own orders and receipts — not those of other subaccounts under the same parent.
Please let us know how this can be fixed or configured properly so that subaccounts have restricted access to only their own data.
I believe this is likely a configuration issue with the subaccount permissions. When you edit each subaccount, please check the permissions settings - specifically look for the "View all account orders" option: https://prnt.sc/G2_O5grlJz_3
This option should be disabled for each subaccount. When it's enabled, the subaccount can view all orders of the parent account plus other subaccounts' orders. When disabled, they'll only see their own orders.
Each main account can configure this when creating or editing subaccounts, so please check if this permission might have been accidentally enabled for your subaccounts. This would explain why they're able to see each other's receipts and orders.
Thank you for your reply — that makes total sense, and indeed that’s exactly what was happening.
I have one more question:
Is there any way to configure this so that subaccounts by default cannot view other subaccounts’ orders?
Or does it always have to be set manually for each subaccount?
The reason I’m asking is that if a salesperson creates 150 subaccounts, they would need to edit each one individually to disable that permission, which becomes quite time-consuming.
We’ve detected a visibility issue in the B2B system related to parent and subaccount relationships.
When we create a subaccount and assign it to a parent account, everything works correctly — the parent account can see the subaccount and view its orders and receipts, as expected.
However, when we create multiple subaccounts (for example, 3, 4, or 5) under the same parent account, a problem appears:
➡️ All subaccounts can also see the receipts of the other subaccounts linked to the same parent account.
This should not happen.
Expected behavior:
The parent account should be able to view all orders and receipts from all its subaccounts.
Each subaccount should only be able to see its own orders and receipts — not those of other subaccounts under the same parent.
Please let us know how this can be fixed or configured properly so that subaccounts have restricted access to only their own data.
Thank you for your help.
Best regards,
Hi Alejandro,
Thank you for purchasing our plugin,
I believe this is likely a configuration issue with the subaccount permissions. When you edit each subaccount, please check the permissions settings - specifically look for the "View all account orders" option: https://prnt.sc/G2_O5grlJz_3
This option should be disabled for each subaccount. When it's enabled, the subaccount can view all orders of the parent account plus other subaccounts' orders. When disabled, they'll only see their own orders.
Each main account can configure this when creating or editing subaccounts, so please check if this permission might have been accidentally enabled for your subaccounts. This would explain why they're able to see each other's receipts and orders.
Let me know if this helps solve it,
Kind regards,
Stefan
Hi Stefan,
Thank you for your reply — that makes total sense, and indeed that’s exactly what was happening.
I have one more question:
Is there any way to configure this so that subaccounts by default cannot view other subaccounts’ orders?
Or does it always have to be set manually for each subaccount?
The reason I’m asking is that if a salesperson creates 150 subaccounts, they would need to edit each one individually to disable that permission, which becomes quite time-consuming.
Thanks again for your help.
Kind regards,