Credit Card Expires

[kabbinfever]

We have set up our store for a client and all seems to be working quite well! However, the emails generated after a purchase that send purchase and credit card info to the client do not include the cc expiration date, and he needs this to process the order. It does show up in the Admin section under "Customer Orders", but we have not given our client permission to access the Admin area. Is there a way to get this info included in the emails sent to him? Thanks much for your help!

[stevesh]

What payment module are you using?

[kabbinfever]

sorry 'bout that... We are using the Credit Card-Offline Processing (cc) module.

[Kim]

You could run into major problems with PCI compliance by emailing all of the CC information.

Why are you not letting the client into his admin?

[kabbinfever]

As recommended by Zen Cart -- and to hopefully be pci compliant -- there are two emails that get sent -- each going to different email addresses and each one having only a portion of the cc number. All we would like is for the expiration date to show up in one of those emails. As far as allowing the client access, we could find no way of limiting access to a specific area -- like Customer Orders -- as was possible when we used MIVA. And I really don't want others to have full access to other Admin areas 'cause I don't want to run the risk of having someone else screw things up and then have to re-do them.

[stevesh]

There's a mod here that allows you to restrict access to some admin areas:

http://www.zen-cart.com/index.php?ma...products_id=86

I haven't used it, so I don't know how the restrictions work.

[DrByte]

As far as allowing the client access, we could find no way of limiting access to a specific area -- like Customer Orders

You could try the Admin Profiles addon, as mentioned by stevesh above.

And I really don't want others to have full access to other Admin areas 'cause I don't want to run the risk of having someone else screw things up and then have to re-do them.

Sounds like you should really be educating your users, rather than handcuffing them.