# Issue with access to placed and received orders

**URL:** <https://community.hivepress.io/t/issue-with-access-to-placed-and-received-orders/15958>\
**Category:** HivePress\
**Tags:** marketplace\
**Created:** [May 26, 2025, 4:17pm UTC](https://community.hivepress.io/t/issue-with-access-to-placed-and-received-orders/15958 "2025-05-26T16:17:42Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jay3](https://community.hivepress.io/letter_avatar_proxy/v4/letter/j/aeb1de/32.png) [@Jay3](https://community.hivepress.io/u/Jay3)\
**Post date:** [May 26, 2025, 4:17pm UTC](https://community.hivepress.io/t/issue-with-access-to-placed-and-received-orders/15958/1 "2025-05-26T16:17:42Z")

</div>

Hi,

I am testing the placed and received orders, and I realized that if I am a vendor that has received orders, but has also placed orders, I can see the same order in both menus. Explanation:

## Steps to reproduce

Being yourself a vendor, place an order from some other vendor. Let’s say the order gets number 111

## Actual result

Order is placed. Normally the URL to see this order would be …my-account/view-order/111/ . This works.  
Strange issue is that I can also view this order with /account/vendor/orders/111/ (when I manually insert the order number in the url)

## Expected result

Only …my-account/view-order/111/ should display this order, as it is a placed order

## Extra details

The general overviews work correctly:  
…account/vendor/orders/ shows only received orders -\>good  
..my-account/my-orders/ shows only placed orders -\>good

I think there are no consequences that could compromise orders, but I think this should be corrected.

Thanks!

---

<div class="post-metadata">

**Author:** ![andrii](https://community.hivepress.io/user_avatar/community.hivepress.io/andrii/32/2951_2.png) [@andrii](https://community.hivepress.io/u/andrii)\
**Post date:** [May 27, 2025, 12:40pm UTC](https://community.hivepress.io/t/issue-with-access-to-placed-and-received-orders/15958/4 "2025-05-27T12:40:58Z")

</div>

Hi,

We checked this issue from our side, and it seems okay. After we created the order, we manually entered the URL, and it redirected to the home page. Please make sure that the user you are testing this with does not have administrator access.

---

<div class="post-metadata">

**Author:** ![system](https://community.hivepress.io/user_avatar/community.hivepress.io/system/32/13990_2.png) [@system](https://community.hivepress.io/u/system)\
**Post date:** [June 26, 2025, 12:41pm UTC](https://community.hivepress.io/t/issue-with-access-to-placed-and-received-orders/15958/5 "2025-06-26T12:41:12Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.