Shopify: get users information without full access

2015-10-13T07:41:18
ID H1:93616
Type hackerone
Reporter supernatural
Modified 2015-11-04T18:50:22

Description

An issue where some sensitive information about a store's staff member could be returned to any other staff member. For instance, the last IP address of the store owner could be retrieved by any other staff member of the store, which is undesirable.