Users and roles

Create staff accounts and assign operational roles from Admin Settings → Users. Full admin access comes from Django staff/superuser accounts (role admin), not from the role picker.

Who and where

• Roles: Admin only (staff/superuser)
• Routes: /settings?tab=users (legacy /users redirects here)
• Nav: Sidebar → Settings → Users

Section copy: Users — Add staff, assign roles, and manage dashboard access.

Also see Roles overview.

Roles you can assign

Role	Description shown in UI
Stock	Add stock, create products, manage warehouse transfers
Design	View and manage workflow items in Design status
Print	View and manage workflow items in Printing status
Accounts	View orders and sales reports (read-only)

Default landing after login: Stock → warehouse products; Design/Print → workflows; Accounts → reports; Admin → dashboard.

1. Open Users

1. Sign in as Admin.
2. Open Settings.
3. Select Users in the left nav (/settings?tab=users).
4. Confirm the table columns: Username, Name, Email, Role, Joined, Actions.

Empty state: No users yet. Create one above.

2. Create a user

1. Click Create User.
2. In Create User, fill:
   1. **First Name ***
   2. **Last Name ***
   3. **Username ***
   4. **Email ***
   5. **Role *** (default Stock)
   6. **Password *** (minimum 8 characters)
   7. **Confirm Password ***
3. Click Create User (pending: Creating…) or Cancel.
4. Success toast: User created successfully.

Superuser/staff admins are not created here; they are managed outside this picker (and are excluded from this list API).

3. Edit profile or password

1. On a row, click Edit.
2. Dialog title: Edit User — {username}.
3. Update First Name*, Last Name*, Username*, Email.
4. Optional: + Change Password → New Password / Confirm New Password (min 8, must match). Hide with − Hide.
5. Click Save Changes (pending: Saving…).
6. Success: User updated successfully.

4. Change role

1. On the row, click Role → opens Change Role.
2. Subtitle: Editing permissions for {username}.
3. Select a role card (Selected badge on the active choice).
4. Click Save Role (pending: Saving…).
5. Success: Role updated successfully.

5. Delete a user

1. Click the trash control on the row.
2. Confirm: Delete user "{username}"? This cannot be undone.
3. Success: User "{username}" deleted.

6. Forgot / reset password (staff Admin login)

Staff who use the Admin login can reset their own password without another admin editing the user row.

Request a reset link

1. On Admin Login (/login), click Forgot password?
2. Open /forgot-password — title Forgot password; Enter your email or username to receive a reset link.
3. Enter Email or username → Send reset link (busy: Sending...).
4. On success, the green confirmation shows the API detail message. Use Back to sign in if needed.

Set a new password

1. Open the email link (Admin /reset-password?uid=…&token=…).
2. Page title: Set a new password — Choose a new password for your admin account.
3. Enter New password and Confirm password (minimum 8 characters; must match).
4. Click Reset password (busy: Saving...). On success you are sent to /login.
5. If uid/token are missing or invalid: This reset link is invalid or has expired. → Request a new reset link.

Admins can still set a password for another user via Edit → + Change Password (section 3 above). POS terminal unlock passwords are separate — Create a POS terminal.

Checklist

• Staff get the correct operational role for their job.
• Accounts users understand Orders/Reports are read-only for mutations.
• Design vs Print know they share Workflows with stage-limited drag.
• Owners keep at least one staff/superuser admin outside the four operational roles.
• Staff know Forgot password? on Admin login (not the POS unlock screen).