Docs / Operations

Staff and permissions

Owners, managers, cashiers, waiters, kitchen. Manager-gated sensitive actions.

halopos has five roles. Staff can have more than one role across different locations. Every role is location-scoped — staff at one venue don't see data from another.

RoleWhat they can do
OwnerEverything. Billing, deletion, 2FA.
ManagerMenu, reports, staff, overrides. Can't change billing.
CashierCashier surface only. Sensitive actions need a manager override.
WaiterMobile surface only. Read menu, write orders.
KitchenKDS only. Read orders, bump tickets.

Sign-in

All staff sign in via Clerk. Owners may enable 2FA on their account.

2FA

The owner account has TOTP-based 2FA enabled by default. See ADR-012. Recovery codes are shown once at setup — screenshot them.