Roles and permissions¶
Every staff member in Hesaby has a role that determines what they can access and do. The core idea: keep the operational point-of-sale work open so the apps never stall, but protect the sensitive things (money, settings, staff, prices) by role.
Roles at a glance¶
| Role | What they can do |
|---|---|
| Owner | Everything — and they are the only one who can manage Admin accounts (create/delete/change role/suspend/reset the PIN of another admin) |
| Admin | Full management of the restaurant: settings, prices, reports, and staff — but cannot create/edit/delete an admin or owner account nor promote anyone to admin |
| Manager | Reports, the dashboard, inventory and suppliers, editing the menu and prices, and approving sensitive operations — without access to settings or staff |
| Cashier | Point of sale, orders, payment, and closing bills |
| Waiter | Taking and managing orders at tables |
| Driver | Delivery work: sees their orders and updates their status, without access to reports or settings |
Who can access what (permissions matrix)¶
| Operation | Driver | Waiter / Cashier | Manager | Admin | Owner |
|---|---|---|---|---|---|
| Point of sale (orders/tables/payment/KDS) | Partial (delivery) | Yes | Yes | Yes | Yes |
| Reports and dashboard | No | No | Yes | Yes | Yes |
| Menu and prices (editing) | No | No | Yes | Yes | Yes |
| Settings (editing) | No | No | No | Yes | Yes |
| Staff | No | No | No | Yes* | Yes |
| void / comp (with approval) | No | With manager approval | Yes | Yes | Yes |
| Cancel an order (refund) | No | With manager approval | Yes | Yes | Yes |
💡 Reading the menu and reading settings (such as delivery fees) is open to any logged-in staff member — only editing is protected.
* The admin manages staff, but only the owner can touch admin/owner accounts.
Manager-override¶
If a lower-role staff member wants to do a void/comp or cancel an order:
- The system requests manager approval.
- The manager enters their PIN on the same device.
- The operation goes through and is logged (who did it and who approved) — the staff member is not logged out.
This approval token is valid for only 3 minutes, single-use, and tied to the same order the manager saw — so it can never be reused on a different order.
🔒 Security: this prevents any staff member from voiding or discounting on their own, and leaves a permanent trail for loss prevention.
⚠️ Change the default codes for the admin and kitchen screens from Settings → Security before going fully live.
Next: Adding menu categories