!
Hubzilla DevelopmentThe context here is the cart addon. At some level there is a need to have access to at least SOME info about the purchaser - especially for customer service purposes. But after mucking about in the code, I can't figure out what information the seller should rightly have access to and how to properly obtain it so that there is no inadvertant leak of private data. I'd prefer not to force a remote profile query every time there is a search done - that seems wasteful. But I don't want to store info that could later be leaked or misused.
As it stands, the order table stores the channel hash of the purchaser, but does not directly store any other information about the purchaser. I'd like to maintain whatever "boundaries" already exist regarding access to profile data and would rather not expose anything even if it happens to be in the data tables on the storefront's hub.
So... what information can I get about purchasers using the existing tables in the storefront hub and what is the "right" way to get it? Is it appropriate to simply query the xchan table directly? If I have the channel hash, is there a proper way to grab the profile without making a remote request to the purchaser's hub? Is there another place this info should come from? My goal at this point is not to store more than absolutely necessary in the order table - data that isn't stored can't be leaked, after all.