Customer Authorization Status - Not Working?

[Beeunique]

Hi,
On my website customer authorisation status is set to authorised automatically so all new customers can order straight away if they wish however on some occassions I would like to stop someone from ordering or make them pending approval until they contact me however so matter what setting I put this on all customers can still order. This means in some cases we have to cancel an order and issue refunds etc whereas stopping someone from being able to order or checking with us for confirmation first would work much better. Any ideas whats gone wrong as others say this setting works fine for them.
Thanks

[Kim]

What are your settings?

[Beeunique]

Hi - not sure if this is what you mean, if not please let me know which info you need. Someone else normally sets all this stuff up but they been fobbing me off with 'it wont work' for months and that if it did work then we would need to activate each new customer so they could order - not sure how true that is but would not be practical as we not around 24/7 so would need default one to stay as authorised/can order etc

Customer Approval Status - Authorization Pending 0
Customer Authorization: filename customers_authorization
Customer Authorization: Hide Header false
Customer Authorization: Hide Column Left false
Customer Authorization: Hide Column Right false
Customer Authorization: Hide Footer false
Customer Authorization: Hide Prices false

Thanks

[Ajeh]

Customer Authorization is designed to either be required for a manual authorization after the account is made or not used at all, meaning everyone can create an account an buy immediately ...

To make it where Customer Authorization can be denied after the account is made, you would need to change the code for how this is managed ...

What you would have to do is set the Authorization to be ON when an account is created ...

But, you would need to customize the code to set everyone to be "automatically" approved rather than "manually" approved when the account is created ...

This would then let you turn off someone's authorization later ... or turn it back on ... but all new accounts would be able to be created, automatically authorized and then the customer can immediately buy and complete their order without you first needing to authorize them manually ...

[Beeunique]

Thanks - is it a tricky thing to change the code? (Mr B always says no to things until I prove it can be done without too much hassle lol).

If this is hard to do is there another way to limit a user's ability to purchase from the website? Its very very rare we get someone we dont want to sell to and we know we can block an ip in extreme case but if they are from an ip range e.g. university theres no way to stop them placing an order - if we delete account they can create a new one and if we change password etc they can request a copy (all without us knowing until the order arrives) - we then have to cancel and refund etc. Again as I said its very very rare we would need to do this but one customer in particular wont stop trying to order to a country we wont ship too (have removed the country from shipping and customer account so they keep creating orders with their overseas address and UK as the country). Figured the authorisation option would stop this from happening and I would prefer to use that, but if theres another way to limit a user from purchasing please let me know.

[Ajeh]

If you look where the create account happens, you just need to add on to the INSERT that the customers_authorization is set to 1 ...

A search in the Tools ... Developers Tool Kit ... in the bottom input box for the field:
customers_authorization

should help you locate the file you need to customize to have New Customers have the customers_authorization set to 1 vs the current logic based on the setting ...

[Beeunique]

Ajeh,

Is this where we need to change the code?

/public_html/includes/modules/custom folder/create_account.php

Line #69 : $customers_authorization = CUSTOMERS_APPROVAL_AUTHORIZATION;

Line #309 : 'customers_authorization' => (int)CUSTOMERS_APPROVAL_AUTHORIZATION

Line #384 : $_SESSION['customers_authorization'] = $customers_authorization;

Thanks

[Ajeh]

Only change these:
CUSTOMERS_APPROVAL_AUTHORIZATION

to the new value that you want new accounts to be set to ...

By default, these values are set to force the customer to wait on manual approval when the account is created ...

You are wanting the account to be pre-approved, so that you can use the Customer Authorization as a means to disable an account ...

Be aware, this is only so valuable as the customer could make a new account with a new email address to try to skirt the issue ...

[martyndw2005]

Hi Ajeh,

I have been doing the update for beeunique and setting the values you have suggested to 0 did what i wanted for a new customer.

However we noticed that a guest is asked to login to the shop where the add to cart button normally is with the customer approval status set to on in admin ie value 3 so that as suggested if we switch off customer authorization for someone they can browse but not go to the shopping cart. Please help us setup the guest so they can browse as per normal add to cart and then create account.

As per the customer been able to create a new account to get over this problem yes this is a possibility however they would need to go to the trouble of using another email address and besides the people nickki is wanting to do this to is very small but useful to her none the less.

Thanks for your help so far you have been most helpful.

regards
Martyn
www.beeunique.co.uk

[Ajeh]

I come to your site ... make an account ... I am automatically approved for shopping ...

Two days later, you take away my ability to shop ...

Three days later, I come along and want to add things to my cart to checkout ...

If I login ... I know immediately I cannot buy anything ...

If a guest comes along, I see immediately that I can browse but need to create an account to buy ...

There is no way to distinguish the guest from the person marked as not allowed to shop until they login ... so, when Authorization is turned on, you have the choice of people can see or not see the shop and see with or without prices ...

You would have to do a lot more work and customization to toss the guy on his ear after he has already been shopping for an hour putting things in the cart only to login and find out he is not allowed to buy anything ...

Mainly you tick off the customer doing this ...

The other way, you give everyone a chance to see things ... maybe tease them into making an account so they can see prices ... and the looser will login and see his account is not approved ...