The store manager, cashier, warehouse management and finance all need the system, but they should not have the same operating rights. The risks of chargebacks, price changes, inventory adjustments and exporting member information are different, and permissions cannot be divided only by whether you can enter a certain menu. List specific actions and data ranges during design to keep job responsibilities consistent with server authorization.

Start from demand

The cashier handles transactions in the store, and special discounts or refunds are confirmed according to the determination process; the warehouse manager is responsible for receiving, receiving, and inventorying, and the financial department checks the fund records. The headquarters can view the summary, but the personal data details are still authorized according to the purpose. Temporarily assist in setting the validity period, and transfer personnel to recover the old scope in a timely manner. Sensitive actions are recorded by the operator and the basis, and daily work is completed without using an administrator account shared by multiple people.

Things that should be paid attention to in the design

For example, store employees can only view orders from this store, and accessing links from another store cannot bypass restrictions. Just because the store manager sees the necessary transaction information when approving a refund does not mean that the company-wide member contact information can be downloaded in batches. The headquarters price adjustment operation will first preview the affected stores and products before confirming the release.

Check the processing results item by item

  • Acceptance covers pages, interfaces, exports and attachment links, and tests whether the permissions of the original session are updated in time after the role changes.
  • The system provides an authorization application entrance, and normal collaboration does not rely on privately borrowing accounts.
  • The administrator’s emergency operations also need to leave traces and check afterwards.
  • Permission maintenance is combined with real job changes to prevent temporary full permissions granted when opening a store from existing for a long time without anyone taking responsibility.

Check processing results

Refund approval and actual refund execution can be granted separately, reducing the need for one person to modify all records at the same time. The basis for special business is retained after authorization. Permission rejection prompts tell employees which role to find for confirmation, without being induced to borrow other people’s accounts.