Nope, if you have the PNR and name you can do anything.

While yes, there could be some negatives if someone mischievously get the PNR info...on the flip side I book, cancel, change flights for all my employees on a regular basis. Would be a royal PITA if I had to have each individual try and book and manage their own itineraries when moving a whole team from all over the country.

But unless we book and the the emailed receipt, we have no way to get the PNR unless they give it to us.