FAQ — Access & Roles

import { Aside } from ‘@astrojs/starlight/components’;

Vietnamese version

Xem bản tiếng Việt

Table of contents

• Cannot open Sale
• Access Denied (403)
• Customers tab missing
• Settings opens but device save fails
• Employee cannot switch store
• Still stuck?

Cannot open Sale

The **Sale** tab is hidden, or clicking it shows a banner "You do not have access".

Cause: The employee account is missing the pos or order write module.

Fix (store owner):

1. Sign in to vendor web with the owner account.
2. Open Employees → Roles → edit the employee’s role.
3. Enable the POS write module (or order write for the dashboard POS).
4. Save — the employee should sign out and sign back in to apply.

See: Roles (Vendor).

Access Denied (403)

Navigating to a path (e.g. `/point-of-sale/orders`) shows a blank page with "Access Denied" or a lock icon.

Cause: The route requires a module not present in your profile.modules.

Fix:

Screen	Module needed	Action
/point-of-sale/sale	pos write	Ask owner to enable POS write on the role
/point-of-sale/orders	order read	Ask owner to enable Order read
/point-of-sale/customers	customer read	Ask owner to enable Customer read
/point-of-sale/returns	order write	Ask owner to enable Order write
/point-of-sale/settings/*	settings write	Ask owner to enable Settings write

Note: The store owner usually passes every POS route (because they have settings + pos write).

See: Sign in & access.

Customers tab missing

On the Cashier sidebar, the **Customers** item doesn't show up.

Cause: The role is missing customer read in profile.modules.

Fix: Ask the owner to enable the Customer (read) module in Employees → Roles. Then sign out / sign in to apply.

Settings opens but device save fails

`/point-of-sale/settings` opens fine, but adding a printer or terminal returns a **403 Forbidden** from the API.

Cause: Opening Settings needs settings read (any employee has it), but saving CRUD needs settings write or pos write.

Fix:

• Ask the owner to check the role has both: settings read + settings/pos write.
• In practice, only the store owner should configure hardware.

Employee cannot switch store

On the top bar, the **store selector** is locked (lock icon) or only shows a single store.

Cause: The employee belongs to only one store in the system (profile.store_id is fixed).

Fix:

• If the employee genuinely works at multiple branches: the owner must assign more store_id values in Employees → Detail → Stores.
• If the employee only works at one store: this is the correct configuration; no change needed.

See: Employees & stores.

Still stuck?

- Screenshot of the **Access Denied** page or error banner. - **Employee email** + current **role**. - **URL** being accessed (e.g. `/point-of-sale/sale`). - **API error code** (if shown in the browser console — open DevTools → Network).

Send to the store owner — they can adjust the role. If the owner is also blocked, contact support@lionpos.com.

Test scenarios (internal QA)

ID	Scenario
P3	Employees without pos / order write cannot open Sale
TC-PS2-003	Accessing an out-of-tenancy store → 403 on API

See also

• Sign in & access
• Roles (Vendor)
• Employees & stores
• Store overview