Administration and Controls
How administrators keep Sales secure, configured, and reliable.
Access and Permissions
Start with least-privilege access. Give users only the permissions required for their actual responsibilities, then test using a non-admin account.
- client
- customer
- invoice
- estimate
- estimate_request
- sales_summary
- store
- invoice_create
- invoice_update
- invoice_delete
- invoice_manage
- client_create
- client_update
- client_delete
- customer_create
- customer_update
- customer_delete
- customer_category
- customer_category_create
- customer_category_update
- customer_category_delete
- customer_manage_labels
- store_create
- store_update
- store_delete
- estimate_create
- estimate_update
- estimate_delete
- estimate_request_create
- estimate_request_update
- estimate_request_delete
- sales_settings
The sales_settings permission governs the Sales > Sales Settings page (sales/settings), where invoice and estimate numbering, branding, footers, terms and reminder emails are configured. Grant it only to staff who are allowed to change how every invoice and estimate is issued. Within that page, the Invoices tab additionally requires invoice, the Estimates tab requires estimate, and the Estimate Request section requires estimate_request.
Settings, Menus, and Configuration
Configuration files found
- default_menu.php
- menu.php
- module_config.php
- permissions.php
- routes.php
Menu entries found
- Sales
- Clients
- Submenu Sms Customers
- Submenu Sms Invoices
- Estimates
- Sales Matrix
- Stores
- Sales Settings
- Pos Open Register
Automation and Integrations
Scheduled jobs
6 job(s) found. Review cron, job setting gates, and last-run evidence.
Dashboard widgets
No dashboard widget registration was detected.
Public pages
No public page config or public-style route was detected.
API surfaces
No API config files were detected.
Seeders
Seeder files found: SalesDemoSeeder.php. Use them only for the data purpose documented by the module.
Tests
No module-specific test files were found.
Administrative Controls Checklist
- The module toggle is enabled only for tenants or environments where the workflow is approved.
- Role permissions are assigned by responsibility, not by convenience.
- Menu entries, default menu entries, and routes point users to the intended module-owned screens.
- Users know who is allowed to change settings, templates, status rules, and delete actions.
Change Management
- Announce workflow or permission changes before they affect live users.
- Update module README, CHANGELOG, and this guide when a workflow changes.
- For menu, route, permission, widget, API, or migration changes, validate the module from a non-admin account.
- Keep public pages, API examples, dashboard widgets, and scheduled jobs aligned with the real data model.