Configuring roles and permissions
Roles bundle allowed operations and are assigned to users.
Built-in roles
Roles are provided for owner, administrator, manager, accountant, cashier, and employee.
- Built-in roles are protected from deletion.
Custom roles
Create a clearly named role and assign only the permissions its holder needs.
- Updating permissions replaces the previous set in full.
Protection
The system checks authorization for every protected operation rather than relying only on hidden interface choices.
- A role cannot be deleted while assigned to users.
