Most Magento 2 POS deployments treat every till operator the same: anyone signed in can apply a 50% discount, void a line, or process a refund without a trace. For multi-staff retail and restaurant operators, that is a direct path to margin leakage and shrinkage. This extension closes the gap with a proper accountability layer purpose-built for the point of sale.

ECOSIRE engineers this as a dedicated module under app/code/Ecosire/PosStaffControl, integrating with your Magento Open Source or Adobe Commerce POS (Magento POS, MageWorx, Webkul, or a custom React/PWA till) via service contracts and REST/GraphQL endpoints rather than brittle template hacks. Cashier roles are defined against a new permission registry wired through acl.xml and enforced server-side with plugins/interceptors declared in di.xml, so a blocked void cannot be bypassed from the browser.

Each sensitive action — discount beyond a threshold, line/order void, refund/return — is gated. When a cashier lacks the permission, the POS prompts for a manager-approval PIN; the override is validated by a service contract and written to an audit log via an observer on the order/credit-memo events. Staff clock-in/clock-out is captured against shift records, and a cron job reconciles open shifts. Per-cashier sales, override frequency and commission are surfaced in admin reports and exposed over the API for your BI tool.

Because it is built to order, ECOSIRE scopes it to your exact POS, your outlet/store-view structure and your reporting needs, then installs and supports it. No generic one-size extension, no guessing — a clean, upgrade-safe module that survives Magento patches.