Login, staff access and permissions

Password reset, admin vs staff routes, onboarding, session timeout, and subscription locks.

Login, staff access, and permissions

Password reset

From /login, use the password reset flow and check spam folders for Supabase auth mail.

Staff versus admin

Admins see Reports, full Settings tabs, and Dining Availability when your tier includes it.
Staff use the same base URL for Account (/dashboard/settings shows only personal fields) and cannot open admin only routes (the app redirects or hides items).

Session timeout

Admins configure optional session timeout under Settings → Staff. Shared tablets will log users out after idle time; signing back in is expected.

Subscription locks

When Plan is past_due or the subscription has fully ended, many venue mutation APIs return errors. Staff may think permissions broke when billing actually needs attention on Settings → Plan.

Onboarding loops

If you are repeatedly sent to onboarding, finish each required step. If a step looks complete but the router still loops, contact Support (/dashboard/support) with the venue id.

Superuser routes

Internal superuser tools under /super are not the venue dashboard. Venue staff should live under /dashboard.