Administration
Users (Administration → Users)
- Create users with name, email (sign-in ID), phone, role, status, warehouses and default warehouse.
- Reset password: shows a one-time temporary password, or emails a reset link if email is configured.
- Unlock a locked account, revoke sessions (signs the user out everywhere), view login history.
- Delete is soft (history kept; the email is freed for reuse).
Rules enforced on the server: nobody can change their own role or status, or grant a role or permissions they don't hold; only a Super Admin can create or modify Super Admins; the last active Super Admin cannot be demoted, deactivated or deleted; limited admins only manage users inside their own warehouse scope. Changing someone's role or status signs them out everywhere.
Roles (Administration → Roles & Permissions)
Custom roles are built with a permission matrix (modules × actions) and an all warehouses flag. Super Admin is locked and implicitly holds every permission. A role in use cannot be deleted.
Settings (Administration → Settings)
| Tab | Contents |
|---|---|
| Company & branding | Name, address, logo, contact details |
| Regional | Timezone, date format, currency |
| Inventory | FEFO/FIFO default, negative stock, near-expiry days, alert windows, recount threshold, adjustment/transfer approval, pick batch verification |
| Security (Super Admin) | Idle timeout, login attempts, lockout, Remember Me days, password length, require 2FA for admins |
| Numbering | Document prefixes, padding, year in the number |
| Labels, UI, Import | Label defaults, polling interval, import limits |
| Custom fields | Extra fields for warehouses, locations, products, suppliers, customers |
All changes are validated and audited (before/after, no secrets).
Email & schedules
SMTP host, port, encryption, username, password (stored encrypted, never shown again), sender and timeout; a test email button; the email delivery log; scheduled reports; and the exact cron command. See reports-and-analytics.md.
Audit log (Administration → Audit Log)
Read-only and filterable by user, action, entity, warehouse and date, with a JSON detail view. Super Admins can export it to CSV. Audit rows cannot be edited or deleted from the application.
Help Center administration
Super Admins can create, edit, categorise, reorder, publish/unpublish and preview articles, with revision history and restore (help/admin). Article HTML is sanitised on save and again on display; scripts, event handlers and javascript: links are removed. Reseed reloads unedited articles from docs/help-articles/.
Backups and updates
See backup-restore.md and application-updates.md.