Users and Access
Version: 1.0.0
Route: /settings/users-access
Who can access: Primarily admin (menu item shown when user.role === 'admin'). page_key settings-users-access. Editors may lack edit rights even if they can open some settings elsewhere.
Screenshot(s)
What this page does
Manages app users and per-page permissions: can_view, can_edit, can_delete for each page_key. Admin role bypasses these flags in the running app.
Layout
- Heading Users and Access
- User list (name, email, role)
- Permission matrix / editor for selected user
Steps
- Sign in as admin (
admin@admin.com/admin123in Demo Mode). - Click Open menu → Settings → Users and Access.
- Select a user (e.g. Demo Editor / Demo Viewer).
- Toggle can_view / can_edit / can_delete for page keys such as
all-courier,payments-invoice,due-cod, etc. - Save changes. In Demo Mode, editor defaults to view+edit (except users-access), viewer to view-only.
Permissions model
| Role | Behavior |
|---|---|
| admin | Full access; bypasses permission checks |
| editor | View + edit most pages; limited on Users and Access |
| viewer | can_view only |
Errors
| Situation | Notes |
|---|---|
| Menu missing | Not signed in as admin |
| Demo passwords fixed | Change-password API returns Demo Mode message |