Protecting your checkout cash drawers, margins, employee permissions, and sales audit trails against tampering and loss.
Strict separation between Admin, Manager, and Cashier accounts prevents cashiers from manipulating sales margins, voiding invoices unnoticed, or viewing wholesale purchase prices.
Passwords are irreversibly hashed using PBKDF2 SHA-256 with individual cryptographic salt seeds. Even in database exports, employee passwords cannot be decrypted.
All financial invoice creations and inventory subtractions utilize atomic database transactions. If store electricity cuts mid-sale, the database automatically rolls back clean without corruption.
Clear operational boundaries prevent cashier shrink, inventory inflation, and unauthorized discounts.
| Module / Operation | Admin | Manager | Cashier |
|---|---|---|---|
| POS Terminal Checkout & Print | Full Access | Full Access | Full Access |
| Create Products & Set Selling Prices | Allowed | Allowed | Restricted |
| View Wholesale Purchase Costs & Margins | Visible | Visible | Hidden |
| Supplier Purchase Orders & Restocking | Full Access | Full Access | Restricted |
| Expense Logging & Operating Costs | Full Access | View Only | Restricted |
| Store Profit Reports & Net Margin Analytics | Full Access | Restricted | Restricted |
| User Staff Management & Role Assignments | Full Access | Restricted | Restricted |
Recommended operational best practices for securing your checkout counter and store computers:
Copy-Item db.sqlite3 backup_$(Get-Date -Format yyyyMMdd).sqlite3