Roles and sign-in

Being released

The money rails described here are built and tested, and are being rolled out. Until a rail is switched on for the exchange, invoices are paid by bank transfer or mobile money and recorded by Finance, as today.

Signing in

Staff sign in at exchange.yeshara.network with an email and password. There is no self sign-up: an Admin adds users on the Users screen.

• A session lasts 30 days on that browser, or until Sign out.
• Password in the top bar changes your password, at least 8 characters. It signs you out everywhere else.
• After 5 wrong passwords for an email, or 20 from one address, within 15 minutes, sign-in is paused for a few minutes.
• A suspended user cannot sign in, and is signed out at once.

Roles

Every signed-in user can see every page. What a user can change depends on their roles. A user can hold several. A button you cannot use is greyed out, and its tooltip names the roles that can.

Role	Can change
Admin	Everything. Only an Admin manages users and voids invoices
Desk	Orders, disputes, parties, devices; dispatch; lot moves, consignments, gate passes; trip arrival and advances; vehicles and driver cards; checkpoints, border posts, clearances; invoices
Warehouse	Intakes, conversions, releases, warehouses, inspections; issuing and voiding receipts; dispatch; lot moves, consignments, gate passes; trip arrival
Finance	Early payouts, payouts and escrow; approving and cancelling transfers; settlement; invoices; trip advances, recovering and writing them off; vehicles and driver cards; border cash, including reconciling it
Border	Checkpoints, border posts, clearances; recording border cash
Viewer	Nothing: read only

Two approvals

Every payment out needs two approvals by two different Finance users. A user with both Admin and Finance still counts once. Name at least two Finance users before switching on any money rail.

The audit trail

Every change anyone makes, accepted or refused, is on Audit trail: who, what, to which record, and the outcome.