Staff Roles, Security Controls & Audit Logs
Understand the verified 4 roles, access permissions, "Pause Staff" security toggle, and daily audit logs.
How It Works
The 4 Verified Roles: (1) Owner holds tenancy, billing, and subscription controls. (2) Manager oversees floor operations, POS, inventory, voids, and staff codes. (3) Waiter manages tables, delivers food, and settles checks tableside. (4) Kitchen operates line cook screens without financial access.
Why There Is No Separate Cashier Role: MintLight intentionally equips waitstaff with mobile table settlement. Waiters accept cash, card, and UPI directly tableside, eliminating slow counter cashier bottlenecks and speeding up table turnover.
1-Tap "Pause Staff" Kill-Switch: If an employee misplaces their phone or is suspended mid-shift, managers can click "Pause" on their profile. The staff device is immediately locked out and redirected to /staff/error.
Audit Logging: The staff_audit_logs ledger records logins, logouts, paused accounts, code redemptions, voids, and settlements alongside IP addresses and timestamps.
What You Need to Do (Step-by-Step)
- 1. Review Staff Roster
Navigate to Dashboard -> Staff & Roles. Review all linked devices grouped by role (Waiter, Kitchen, Manager).
- 2. Temporarily Pause an Account
To lock out an employee device temporarily, click "Pause". The profile status turns grey and shows "Paused".
- 3. Resume an Active Account
Click "Resume" on any paused profile to reactivate operational access immediately.
- 4. Permanently Remove Staff Profile
If an employee resigns, click "Delete". This revokes their active session and frees up an account slot under your subscription plan.
- 5. Inspect Daily Audit Records
Click the "Audit Logs" tab to inspect timestamps for logins, voids, table transfers, and payment collections.
Key Screen Controls & Options
Action: Instantly sets is_paused = true, locking the device out of operational screens.
Action: Clears the pause flag and restores operational access.
Action: Displays chronological records of staff actions, voids, and shift durations.
- Paused staff see an explanatory screen: "Your account is temporarily paused. Contact your manager."
- Session tokens on deleted devices are invalidated permanently.
- Waiters only see floor and POS routes (/staff/waiter, /staff/pos).
- Waiters and kitchen staff cannot access subscription management, billing configurations, or dish price editing.
- Managers cannot edit or view the restaurant owner’s root login email or payment credentials.
- Deleting an employee does NOT delete past orders they served; reports retain historical staff attribution.
⚡ Common Floor Scenarios & Edge Cases
What to do: Open Staff & Roles immediately and click "Delete" or "Pause" on their profile. Any person finding the lost phone will be locked out upon opening the browser.
What to do: MintLight validates the staff session role and bounces the kitchen device back to /staff/kds automatically.
đź“‹ Real-World Shift Walkthrough
Waiter Leo misplaces his phone while clearing tables. Manager Maya opens Staff & Roles on her tablet, finds "Leo (Waiter)", and clicks "Pause". When a busser finds Leo’s phone 10 minutes later, the screen shows the locked /staff/error screen. Once Leo recovers his phone, Maya clicks "Resume" and Leo continues serving tables without entering a new Join Code.