FlyerTalk Forums - View Single Post - Access to AF award ticket bought by someone else
Old Jan 26, 2013 | 8:36 am
  #7  
sigbjod
All eyes on you!
10 Years on Site
 
Join Date: Feb 2012
Location: Paris, France
Programs: Flying Blue, Miles&Smiles
Posts: 73
Originally Posted by Xandrios
I believe the AF website allows to lookup any PNR and add/remove FF numbers.
Do you know where I could do this? When going through the award ticket booking process, I can't find any box to enter the FB number of the person flying (if the trip is for someone else than the FB account owner). I'm also unable to find where I could add the FB number myself once the booking is done.

Originally Posted by Xandrios
Having your FF number in the booking can be useful during irrops and for example lounge access. Especially if you have a higher FB level than the person who gave you the award.

If you have silver or ivory I would leave the other persons FF number in there for now, chances are that you can access the lounge for free that way (Assuming that person has Gold or up)
My point exactly. In this specific case, both cards have the same FB elite plus status, so the perks are the same. In that regard, as MSPeconomist mentioned, I wonder what'll happen if some lounge dragon finds it odd that my FB number doesn't correspond with the one used for the booking.

Originally Posted by Xandrios
That sounds like a huge security risk. Is this by any chance the same physical computer that was used to make the booking? Could it be that you are somehow both still logged in?
The same computer was used, but I used different browsers to avoid mixing cookies and sessions. Thus the accounts have never been used in the same environment at the same time willingly. It clearly shows that there's room for improvment when it comes to handling FB accounts and reservations.

Regarding the security risk, I don't know if it's that a big problem since people usually don't have the habit of ordering tickets for complete strangers. In addition, when looking for bookings you'll need the reservation code which, I suppose, is matched with your name so the possibility of exploiting this on a bigger level seems rather limited.

For my part, I could hypothetically spend the miles available in the other person's account without him knowing it, but at some point in time (it's family after all) I'd have to explain myself.
sigbjod is offline