Authorizations
Some actions are too consequential for one person at a POS terminal, but too routine to escalate off the floor. The authorization system is the middle path: the action happens now, at the counter — with a second person's credentials on it.
Actions that can require a signature
The branch decides which of these are guarded; each has its own switch and they share the branch's trust lists:
- Discounts — including complimentary orders.
- Order type changes — moving an order between dine-in/takeaway/delivery after placement.
- Register visibility — seeing a register's expected figures at close.
- Credit orders — letting an order go unpaid against a customer account.
- Delivery charges, service charges and manual VAT — the amounts that move a bill without touching an item.
- Day-close consumption override — the heaviest signature in the system: closing a day without finished stock consumption, after repeated failures. Always reported to the audit email.
Who may sign
Each guarded area has a per-branch list of authorizers. The rules:
- An empty list means unrestricted. Configure the list before relying on the gate — a switch that's on with nobody listed guards nothing.
- Self-authorization: a listed person who is not a cashier completes their own edits without a prompt — a supervisor doesn't sign for themselves. A listed cashier can sign for others but still needs a colleague for their own actions; being trusted to approve doesn't mean approving yourself.
- Disabled or removed users are rejected server-side, even if an open screen still shows them.
How the signature works
The cashier's action opens a prompt: pick the authorizer, and the authorizer enters their credential — password, or PIN/RFID where the branch enables them. The check runs on the server on every submission; hiding or bypassing the dialog changes nothing, because the decision was never in the browser.
Every signature — who asked, who signed, for what, when — is journaled and reportable.
Setting it up well
- Decide which actions genuinely need a second person at this branch. Every prompt costs seconds at the counter; guard what moves money, not everything.
- Fill the authorizer lists with people physically present during trading hours — a list of head-office names nobody can reach turns the gate into a wall.
- Review the authorization journal monthly: who signs most, for what, and whether any pattern (one authorizer rubber-stamping one cashier) deserves a conversation.