Staff Roles & Permissions¶

Objective¶

Allow Super Admins to control which administrative features each staff member can access, ensuring only authorized users perform sensitive operations.

Functional Requirements¶

1. Staff Access¶

Each staff member shall be assigned one role.

2. Permission Levels¶

Permissions may include:

• Dashboard Access
• Package Management
• Image Management
• Partner Management
• Supplier Management
• Booking Management
• Reports
• Settings
• User Management

3. Restricted Features¶

Users without permission shall not see restricted menu items.

4. Direct URL Access¶

If a staff member attempts to open a restricted page directly,

Display:

You do not have permission to access this page.

5. Role Updates¶

When a staff member's permissions are updated,

The changes shall take effect the next time they access the system.

6. Invalid Permission Configuration¶

Display:

Your account permissions could not be verified. Please contact the system administrator.

Acceptance Criteria¶

• Staff members only access permitted features.
• Restricted pages cannot be accessed directly.
• Navigation reflects assigned permissions.
• Clear messages are shown when access is denied.