Overview

Employee Management is a new security feature created to prevent a user from elevating their own permissions or manage permissions for users above their role.  This includes the ability to edit user contact information.  Below is a more comprehensive list of everything included in this new feature:

1. Added the new Employees Role Management feature set to employee roles
2. Prevent users from viewing higher-level users in the existing user list
3. Prevent users from editing employee data

Employee Role Feature Sets

Employees Management

The Employees Management feature set allows users to modify employee (user) details, including basic information, security settings, and role permissions. This includes setting or updating usernames and passwords.

Employees Role Management

The Employees Role Management feature set allows users to control the roles they can assign to others. For example, a Head Cashier can assign the Cashier and Limited Cashier roles but cannot elevate their own role or manage roles for other Head Cashiers or higher-level users.

Roles Management

The Roles Management feature set allows users to configure their feature set permissions, determining which system features they can view, add, edit, and delete. 

It's important to know if someone has the ability to add or edit roles, they will be able to give themselves admin-level access.  We recommend you only assign these privileges to admin-level users.

What to expect after an update to v4.10

Since this new feature is crucial for enhancing security, permissions will not be assigned automatically during the update.  We recommend reviewing the Employees Role Management feature set for each role and configuring it to align with your security needs immediately after the update.