Administration
Users, roles, permissions, audit trail, and in-app notifications. These features sit across the whole system and control who can do what.
Users
Each user has a name, email, password, a role (or roles), and an assigned branch.
- Create, edit, and delete users (admin only)
- Toggle a user active / inactive without deleting them
- A user's branch limits what operational data they see
Roles & Permissions
The system ships with six pre-configured roles, each tuned to what that person actually needs.
| Role | Access |
|---|---|
| Admin | Everything: users, roles, configuration, all data. |
| Manager | All modules except user management. Approves most documents. |
| Finance | Finance, Accounting, all Reports. |
| Sales-POS | POS only. Cashiers see only their own POS transactions. |
| Sales-Invoicing | Quotations, invoices, customer payments — only own documents. |
| Stores | Inventory and Purchasing. |
Beyond the defaults:
- Custom roles can be created with a tailored permission set
- Permissions can be assigned to roles individually for fine-grained control
Branch & Creator Scoping
Two layers of automatic filtering keep users in their lane:
- Branch scope: Operational records (invoices, stock, POs, POS transactions…) are filtered to the user's assigned branch. Admin, manager, and finance see across all branches.
- Creator scope: Cashiers and sales staff only see their own documents. Managers and above see everyone's.
Audit Trail
Every create / update / delete across the system is logged with:
- Which user did it
- When
- What changed (before / after)
- Which document or record
The audit screen is searchable and filterable — useful for investigations, internal review, and compliance.
Notifications
An in-app notification bell in the top bar surfaces things that need attention:
- Documents awaiting your approval
- Low-stock alerts (where configured)
- System events
Mark items as read individually, mark all read, or delete read notifications to keep the list tidy.
Best Practices
- Use the principle of least privilege: Give people the narrowest role that still lets them do their job.
- Deactivate, don't delete: Inactivating a user preserves the audit trail and the documents they created.
- Review the audit trail periodically: Look for unusual edits or after-hours activity.
- Use the notification panel as a to-do list: Approvals queue up there — clearing them daily keeps operations moving.