We have Hikashop 2.1.0 and Joomla 2.5.9.
We currently have some products configured so that only user accounts with access level 'member' can access them.
One of these products is unpublished. However when performing a search with the Hikashop search plugin enabled, the unpublished product comes up in the search results AND the logged in person is able to click on it, add it to their cart and checkout.
Is this a bug with Hikashop access levels?
Let me know if you need more information or further tests.
thank you