Originally Posted by
WineCountryUA
YES
PNR or ticket number and last name, that's all it takes
One should treat their PNR or ticket number like a password
And this is not a UA issue, this is true for most aitlines.
Yes, it's possible to do it. But is it allowed by UA policy?
For example, lets say that I'm sitting in a lounge and the person beside me is holding a print out of their itinerary. I glance over and see their name and PNR. Am I allowed to then go on the website and cancel their flight? I mean, yes, I can do that. But is it allowed?