Role permissions for risky cashier actions

Cashier actions remain button-only, but risky actions require manager approval or admin permission.

PolicyOffline approval queue: trueAudit log required: true

Operator Role Buttons

MANAGER APPROVAL REQUIREDRole: cashierAction: VOID_ITEM

Entered CodeNo code

FeedbackSelect a risk action and press Request Approval.

Void ItemCashier: manager_approval_requiredManager: allowedAdmin: allowedVoiding items affects sales audit and kitchen/cashier reconciliation.

Apply DiscountCashier: manager_approval_requiredManager: allowedAdmin: allowedDiscounts reduce revenue and must be traceable.

Refund PaymentCashier: blockedManager: manager_approval_requiredAdmin: allowedRefunds are high-risk and require elevated approval.

Reprint Final ReceiptCashier: manager_approval_requiredManager: allowedAdmin: allowedReceipt reprints must be logged to prevent misuse.

Open Cash DrawerCashier: manager_approval_requiredManager: allowedAdmin: allowedCash drawer access must be controlled and logged.

Cancel OrderCashier: manager_approval_requiredManager: allowedAdmin: allowedOrder cancellation changes kitchen and payment state.

Price OverrideCashier: blockedManager: manager_approval_requiredAdmin: allowedManual price changes require strong control.