Roles and permissions
This matrix describes default permissions in the September edition. The interface checks permissions as well as roles; a direct URL does not bypass restrictions.
| Capability | Administrator | Cashier | Catalog | Marketing | Courier |
|---|---|---|---|---|---|
| View store orders | Yes | Yes | — | — | Assigned delivery only |
| Change statuses and print | Yes | Yes | — | — | Assigned delivery actions |
| Dispatch, map and general history | Yes | Yes | — | — | — |
| Open the app catalog | Yes | — | Yes | — | — |
| Edit catalog | Yes | — | Yes | — | — |
| Bulk changes (catalog.bulk) | Yes | — | — | — | — |
| Customers and coupons | Yes | — | — | Yes | — |
| Manage loyalty | Yes | — | — | Yes | — |
| View loyalty customers and redeem | Yes | Yes | — | Yes | — |
| Statistics | All | Operational | Catalog | Marketing | — |
| Employees and configuration | Yes | — | — | — | — |
| NotiChat | Yes | If enabled | If enabled | If enabled | Never |
| Own profile | Yes | Yes | Yes | Yes | Yes |
Cashiers can view tables and operate permitted orders. Creating tables or changing settings requires the corresponding permission; viewing does not imply configuration access.
Although cashiers have an internal catalog read permission, Inventory screens in this edition require catalog editing and do not appear in their menu.
Permissions behind missing controls
| Permission | Enables |
|---|---|
| employees.manage | Employee administration. |
| orders.read_all / orders.update_status / orders.print | Order reading, actions and printing. |
| delivery.assign | Dispatch and general assignment management. |
| delivery.read_assigned / delivery.update_assigned | Courier access and actions on assigned deliveries. |
| catalog.read / catalog.write / catalog.bulk | Separate reading, editing and bulk changes. |
| loyalty.manage / loyalty.redeem | Separate program management and redemption. |
| settings.manage | Store configuration. |
| ai.chat | NotiChat access subject to station enablement. |
Service administrators may update permissions. If a feature is missing, check your role with an administrator; do not use a shared account to bypass restrictions.