Feature documentation

Authorized Area

Authorized Area protects dashboard routes, action buttons, and Supabase mutations with restaurant-specific permissions.

1

How users interact with it

Users see only the pages and actions allowed by their current restaurant membership.

Settings is hidden from non-admin users.
Edit and delete actions appear only when permitted.
Sidebar navigation respects access rules.
2

What information is shown

The protected area shows restaurant-scoped operational data after session and permissions are ready.

Selected restaurant context.
Permission-aware navigation.
Action availability by user type.
3

How it connects to workflow

Access checks keep users from changing inventory, audits, or team records outside their allowed scope.

Direct URL access is guarded.
Unauthorized mutations are blocked.
Loading gates prevent stale user context.