ORDER SEARCH:

LeftNav->Products->ViewOrder will serve us the following window:

Enter your order number '1' (or the actual number if you ended up with something different), and submit. The same invoice we saw earlier should appear.

At this moment the application already knows our identity. Let's disguise it. If you now use a different browser where it will be a fresh new client to the server, or, if you click on Logout (even if not logged-on, 'Logout' will result in forgetting everything about a particular client connection), the system will no longer recognize us as 'James Dean'. Assuming you don't have a second browser handy, let's click on LeftNav->Logout, and then try LeftNav->Products->ViewOrder again.

This time you will be asked to provide more info than just an order number:

Try a different identity other than the real owner of the order. You will be denied to see the invoice.

Similarly, as a visitor we have no business of viewing open orders: LeftNav->Products->OpenOrders. If you try, you will be denied access.

Now, let's acquire sales privileges. Log on as user sales (password 'sales') who is an employee of the company with sales privileges. And then go to LeftNav->Products->OpenOrders with your newly acquired status: