Available to:

Business Owner

How Permissions Work

Understanding the permission system.

Permissions in VasBox are automatically assigned based on a user's role. You cannot customize individual permissions; they are predefined for each role.

Permission Model

• Permissions tied to roles
• Automatic assignment
• Branch-level scoping
• Immediate effect on change

How It's Enforced

• UI elements hidden
• Actions blocked server-side
• Data filtered by access
• All attempts logged

Permission Categories

Permissions organized by feature area.

Invoice Permissions

invoices.view

View invoices

invoices.create

Create invoices

invoices.edit

Edit drafts

invoices.finalize

Finalize invoices

invoices.cancel

Cancel invoices

Receipt Permissions

receipts.view

View receipts

receipts.create

Create receipts

receipts.fiscalize

Submit to ZIMRA

Product & Customer Permissions

products.view

products.create

products.edit

products.delete

customers.view

customers.create

customers.edit

customers.delete

Fiscal & Report Permissions

fiscal-days.view

fiscal-days.manage

reports.view

reports.export

Admin Permissions

users.view

users.manage

settings.manage

devices.manage

Branch Scoping

How permissions apply per branch.

Permissions are scoped to the branches a user is assigned to. This means a Manager at Branch A cannot see data from Branch B.

Owner

All branches automatically. Cannot be restricted.

Manager

One or more assigned branches. Can be "All Branches".

Cashier

Single assigned branch only.

Example

A Manager assigned to "Downtown Branch" can only see invoices, receipts, and reports for that branch. They cannot access data from other branches.

Permission Denied

What happens when access is restricted.

UI Elements

Menu items, buttons, and features the user doesn't have access to are hidden from view.

Direct URL Access

Attempting to access a restricted URL directly shows an access denied message.

Action Attempts

Trying to perform a restricted action shows "You don't have permission to perform this action."

Audit Logging

All permission denied events are logged in the audit trail for security monitoring.

Understanding RolesRole capabilities

API TokensProgrammatic access