Account Document Access

CyberStore supports direct links to Account documents, including orders, dispatch notes, invoices, and returns. A direct link identifies a document; it does not grant permission to view it.

Requirements

Direct account-document viewing requires a valid A/R Portal (ARP) license. Before CyberStore displays a document, it verifies that:

• The ARP license is present.
• The signed-in shopper’s current Customer context owns the requested document.
• The shopper is authenticated.

If the shopper is not signed in, CyberStore redirects to login and then returns the shopper to the requested document route. A signed-in shopper with the wrong Customer context is not authorized merely because the shopper has the URL.

Supported routes

Direct document routes follow this pattern:

/ecommerce/{DocumentType}/{DocumentNumber}

Document type	Route segment
Order	order
Dispatch note	dispatch
Invoice	invoice
Return	return

Use the valid document number as the final route segment. Do not publish real Customer document numbers in public examples, screenshots, or support notes.

Invoice sharing and payment

The invoice listing can display a share action that opens links for viewing and paying the selected invoice. The document viewer can also provide a share action while an invoice is open. Copying a link does not change the recipient’s license, authentication, Customer-context, or invoice-payment permissions.

If invoice payment is required, also configure Invoice Payment Settings. Test view and payment links with Accounts that represent the intended access boundaries.

Validation

Validate direct links with non-production documents and Accounts:

1. Open each supported document type while signed in as an authorized shopper.
2. Sign out, open a link, sign in, and confirm CyberStore returns to the requested document.
3. Attempt to open the same link under a different Customer context and confirm the document is not exposed.
4. Close the document viewer and confirm the document page remains available.
5. For invoices, verify that copied view and payment links preserve the same access checks.

See Open and Share Account Documents for the shopper workflow.