Sounds about right. From everything I've read on here and other sites:
Employees cannot CC. Customers can OC/CC depending on state law.
I guess if I worked for Walmart I'd be hoping there was always some customers around who CC in case a nutcase starts going on a killing spree.