Hi all,

I have a problem about site access. An IFS user who even though does not have authorization to the relevant site, he can access and view the relevant shop orders when he searches by shop order number on the shop order and shop orders pages. 
My expectationis that he can only view shop orders on the site it has authority over, and he can not view else shop orders belog to different a site that he does not have authorization.

What could be reason? How can I prevent he view the shop orders that have the site not authorized for the user?

Thanks