Visitors can save and edit wishlists

Hi,

I noticed that visitors are able to add, save, list and edit wishlists.

The problem I see is that visitors are seeing a list of all wishlists made by all visitors and modify, even delete them.

I'm able to see the same list from 2 different computers at the same time..

Is this a bug ( I'm trying to get it prevented from the showcart and showcarts tmpl overrides, or is this an expected behavior?

If this is an expected behavior, what is the reason?

Update:

I added the following code to the showcarts tmpl override on line 10.

$user = JFactory::getUser();
if ($user -> guest) {
	$app = &JFactory::getApplication();
	$app -> enqueueMessage(JText::_('PLEASE_LOGIN_FIRST'));
	global $Itemid;
	$url = '';
	if (!empty($Itemid)) {
		$url = '&Itemid=' . $Itemid;
	}
	if (version_compare(JVERSION, '1.6', '<')) {
		$url = 'index.php?option=com_user&view=login' . $url;
	} else {
		$url = 'index.php?option=com_users&view=login' . $url;
	}
	$app -> redirect(JRoute::_($url . '&return=' . urlencode(base64_encode(hikashop_currentUrl())), false));
	return false;
}

Hi, you are welcome. Do you know if by any chance there is a bug when adding items to a new wishlist?

I create a new wishlist, but every product I add goes to the 1 list I have, I never get to have more than 1.