Hardly "lowly" but would it be so hard to create a secondary level of access to view a return and check its status?

Of allow staff to change an address, telephone # or email address?