Control what each employee can do

The problem is rarely a dishonest employee. It is the honest one who applies a discount they should not, or deletes something they meant to edit.

Start from the role
Owner, manager or staff covers most shops. The owner sees the money and the settings; the rest see their work.
Then adjust the specifics
On top of the role, grant individual permissions: apply discounts, issue refunds, receive or adjust inventory, confirm payments, see the day summary. Grant only what that person needs today.
Everything sensitive is recorded
Discounts, refunds, stock adjustments and deletions are written to the activity log with who did it and when. Not to catch people — to be able to answer the question.
Nothing is deleted for real
What an employee deletes goes to the trash and can be restored. And if a record already has money movements attached, the system refuses to delete it at all.