Panel administrators: owner and manager

Who signs in, who sees what, and where every action is recorded.

There are two levels in the panel, and the difference matters.

Role	Sees
Owner	Everything: every branch, the customer database, payment keys, reports, campaigns, the list of administrators.
Manager	Only their own branch: orders, menu, store, staff. Cannot send campaigns to customers.

⚠A manager cannot reach another branch through the address bar — the server narrows every request to their branch. But sharing the owner account cancels that guard entirely: one account per person.

The action log

Money and team → Log: who did what — changed a price, cancelled an order, cleared a count, edited a tech card — which ingredient, and from what to what.

Tech card edits are logged in detail for a reason: raising a norm on a card is the one way to take stock out without leaving a trace in the arithmetic. Read those lines once a month.