Roles & Permissions
Every employee sees and can do exactly what their role allows, nothing assumed and nothing left to trust alone.
What roles & permissions control
Permission keys, not blanket access levels
Each role is built from individual permission keys, so a role can be given exactly the capabilities it needs, no more and no less.
Discount limits enforced, not just stated
Every role has its own maximum discount percentage, with an optional per-user override, and checkout hard-caps whatever's entered against that limit automatically.
The fiscal year needs its own permission
Closing or reopening a fiscal year is gated behind a dedicated permission, separate from everyday general ledger access.
Closing a year is reversible, not destructive
Closing posts a real closing entry rolling profit into retained earnings and locks the period, and reopening it reverses that entry rather than deleting it, keeping the full audit trail intact.
Accounts lock themselves after repeated failures
Too many failed logins locks an account automatically, and only an admin with the right permission can unlock it again.
Viewing and exporting are separate permissions
A role can be allowed to view reports without automatically being able to export them, and the same separation applies elsewhere in the system.
One set of permissions, enforced everywhere
A discount cap, a fiscal-year lock, or an export restriction isn't a policy someone has to remember to apply — it's checked by the system itself, at the register, in accounting, and in every report, the same way every time.
Questions about roles & permissions
Can a cashier apply any discount regardless of what their role allows?
No. Their role's maximum discount percentage, or their own individual override if they have one, is enforced automatically at checkout.
What happens if I close the wrong fiscal year by mistake?
It can be reopened by someone with the dedicated fiscal-year permission. Reopening reverses the closing entry rather than deleting it, so the full history stays intact.
What happens after too many failed login attempts?
The account locks automatically, and an admin with the right permission has to unlock it before that person can sign in again.
Can someone view financial reports without being able to export them?
Yes. Viewing and exporting are two separate permissions, so a role can be given one without the other.