From Dev.to
Role-Based Access Control for Restaurant POS: Model Actions, Not Job Titles
A cashier, kitchen worker, manager, and owner need different access. But a role name by itself is not a security rule. In OrderRestro, permissions represent capabilities such as creating orders, manag...