Hi,
There is no options to restrict functionalities in the back end either. If you want to do that you can add a small modification to the code of the file administrator/components/com_hikashop/admin.com_hikashop.php after the first <?php tag:
$user =& JFactory::getUser();
if($user->id == 662){ // hear, I suppose that the ID of your client is 662 on your website so you need to change it to the real ID of your client
if(!in_array(JRequest::getWord('ctrl'),array('product','category'))){
$app =& JFactory::getApplication();
$app->enqueueMessage('You can only access products and categories pages');
return;
}
}
For the notification emails, you can set the email addresses in the config under the tab mail in the options "Payment notifications email address" and "Order creation notifications email address". You need to separate the email addresses with a comma and the emails will be sent to all the emails in there.