Users & permissions
Give each employee only the capabilities they need.
Environment-aware guidance
Exact buttons and available actions can vary with company plan, role permissions and enabled capabilities. Stoneware workflow rules and server-side checks remain authoritative.
Role separation
Sales access must not automatically grant stock adjustment, PO approval, landed-cost visibility or stocktake approval. Warehouse access must not automatically grant commercial quote or finance actions.
Server-side enforcement
Permissions must protect direct routes/actions and APIs, not only navigation visibility.
Cost privacy
Supplier cost and landed-cost fields can be omitted for users without cost permissions.
Was this useful?