Privileges
Stockly privileges are granted like any other in Shopware: Settings → System → Users & permissions → Roles → role. The module appears there as Warehouse management (Stockly).
Base roles
Section titled “Base roles”- Viewer — viewing the module’s data: warehouses, stock, movements, reports.
- Editor — additionally changing data: warehouses, locations, rules, suppliers, purchase orders.
- Creator — creating new records: warehouses, locations, suppliers, purchase orders, rules.
- Deleter — deleting them.
The last three each require Viewer, and they are independent of one another: a role may be allowed to edit without being allowed to delete.
Additional privileges
Section titled “Additional privileges”A few operations are separated out, because their effects are irreversible or touch sensitive data:
| Privilege | What it allows |
|---|---|
| Move stock (add, remove, relocate, put away, pick) | moving stock: adding, removing, relocating, putting away, picking |
| Work on a warehouse terminal (everything a picking and packing shift needs) | everything the terminal app calls during a shift, in one box to tick |
| Work at the till (open a shift, count the drawer, ring up and park sales) | the till’s own records: the shift and its drawer count, cash movements, parked baskets, tenders, receipts and what is pinned to the counter |
| Post and reverse stocktakes | posting and reversing stocktakes |
| Approve variances beyond the tolerance | approving variances beyond the tolerance |
| Move a bin together with its stock to another warehouse | reassigning a location, with everything on it, to another building |
| Take over an operation held by another operator | taking over somebody else’s operation |
| Accept a return the shop does not owe | booking a return outside the return window or the exclusions |
| Repair stock integrity findings | repairing integrity findings |
| Export reports (may contain customer data) | exporting reports that may contain customer data |
| Manage AI connections and API keys | managing AI connections and keys — appears only with the AI plugin installed |
| View and clear the AI call log (contains prompts and model responses) | opening the model call log and clearing it — the AI plugin’s own log, separate from the one below |
| View and clear the API call log (contains prompts and payloads) | opening the API log and deleting its entries |
| Manage back-in-stock subscribers | managing back-in-stock subscribers |
| Use the module assistant (asks the AI provider, so it costs API credit) | opening the assistant — appears only with the AI plugin installed. It grants no data of its own; what it gates is the spend on the provider |
They all need Viewer, and some of them build on each other rather than standing alone: Post and reverse stocktakes, Move a bin together with its stock to another warehouse, Take over an operation held by another operator, Repair stock integrity findings, Accept a return the shop does not owe and Work on a warehouse terminal each require Move stock, and Approve variances beyond the tolerance requires Post and reverse stocktakes on top of that. Whoever counted should not be able to approve their own outlier.
Why they are separated
Section titled “Why they are separated”Privileges also apply to integrations and API tokens, not only to people. An integration created to read orders should not be able to call stock removal, and a support role should not be able to export a report full of e-mail addresses.
A practical split of roles
Section titled “A practical split of roles”Picker — Viewer + Move stock. Picks, puts away, receives. Does not change settings or delete warehouses.
Terminal operator — Viewer + Move stock + Work on a warehouse terminal. The right set for a picker with a handheld: a PIN gives access to the sign-in screen, and this privilege is what permits any action once signed in. → Setting up a device
Supervisor — as above plus Post and reverse stocktakes, Approve variances beyond the tolerance and Take over an operation held by another operator.
Cashier — Viewer + Work at the till. This privilege covers the records a counter writes under the cashier’s own name: the shift, the drawer count, cash movements, parked baskets, tenders and receipts. The order behind a sale, its documents and the stock movement are written by the till itself rather than under the operator’s privileges, so a cashier needs no write access to the rest of the module. The money records carry no deletion right at all: a correction is a new entry with the opposite sign.
Work on a warehouse terminal does not cover a till; it is the set a picking and packing shift needs. Which roles may sign in at a counter, and which may approve a discount above the limit, are named separately in the till settings; both of those name roles, not privileges, and neither replaces the privileges above.
Buyer — Viewer + Editor. Purchase orders, suppliers, thresholds. No stock movement.
Module administrator — the full set, including AI connections and integrity repairs.