Free owns the booking record and its signed confirmation access. Pro optionally adds the Customer Dashboard, where an authenticated customer can see owned bookings and supported account actions.
Public confirmation
The confirmation URL contains a signed access contract. The booking code alone is a reference, not authorization. Share a confirmation only through the approved customer communication channel and do not paste its token into a public issue or screenshot.
Customer Dashboard
With Pro and the customer_dashboard capability enabled, the configured My Bookings page can provide login, owned-booking list, booking detail and optional cancellation or policy surfaces. Authentication and ownership checks remain plugin-owned. A theme only presents the returned context.
When a guest cannot sign in, use the dedicated customer login flow and a generic error. Do not send them to a WordPress administrator login or ask for their password.
Staff verification
- Open Hotel Booking → Bookings and search by booking code or approved contact detail.
- Verify the guest owns or is authorized to discuss the booking.
- Read the booking language, stay, room, payment and activity sections.
- Provide the signed confirmation or the configured account link.
If a customer dashboard booking is unavailable, preserve the record and report the code, locale and redacted error. Do not bypass ownership checks by exposing a database ID or internal URL.