M MahirRMS Docs
Ctrl K
Users & Permissions

Authorizations

Some actions are too consequential for one person at a POS terminal, but too routine to escalate off the floor. The authorization system is the middle path: the action happens now, at the counter — with a second person's credentials on it.

Actions that can require a signature

The branch decides which of these are guarded; each has its own switch and they share the branch's trust lists:

  • Discounts — including complimentary orders.
  • Order type changes — moving an order between dine-in/takeaway/delivery after placement.
  • Register visibility — seeing a register's expected figures at close.
  • Credit orders — letting an order go unpaid against a customer account.
  • Delivery charges, service charges and manual VAT — the amounts that move a bill without touching an item.
  • Day-close consumption override — the heaviest signature in the system: closing a day without finished stock consumption, after repeated failures. Always reported to the audit email.

Who may sign

Each guarded area has a per-branch list of authorizers. The rules:

  • An empty list means unrestricted. Configure the list before relying on the gate — a switch that's on with nobody listed guards nothing.
  • Self-authorization: a listed person who is not a cashier completes their own edits without a prompt — a supervisor doesn't sign for themselves. A listed cashier can sign for others but still needs a colleague for their own actions; being trusted to approve doesn't mean approving yourself.
  • Disabled or removed users are rejected server-side, even if an open screen still shows them.

How the signature works

The cashier's action opens a prompt: pick the authorizer, and the authorizer enters their credential — password, or PIN/RFID where the branch enables them. The check runs on the server on every submission; hiding or bypassing the dialog changes nothing, because the decision was never in the browser.

Every signature — who asked, who signed, for what, when — is journaled and reportable.

Setting it up well

  1. Decide which actions genuinely need a second person at this branch. Every prompt costs seconds at the counter; guard what moves money, not everything.
  2. Fill the authorizer lists with people physically present during trading hours — a list of head-office names nobody can reach turns the gate into a wall.
  3. Review the authorization journal monthly: who signs most, for what, and whether any pattern (one authorizer rubber-stamping one cashier) deserves a conversation.
Last updated August 19, 2026