Invite staff and choose who can do what

Shipped on 25 August 2026

Most stores are run by more than one person. Someone writes product descriptions, someone handles orders, someone keeps the books. RedCart gives each of them their own login and a role that fits their work.

What you get

• The owner adds, edits and removes staff accounts.
• Roles owner and content manager since 25 August 2026.
• Roles cashier and accountant, added on 5 September 2026.
• The owner can create a password reset link for a staff member.
• Staff management and the storefront theme stay with the owner.

How it works

The owner opens the staff section of the cabinet, adds a person and picks a role. Each person signs in with their own account, so you can see who works in the store and remove access when someone leaves.

The role decides which parts of the cabinet a person can use. Some areas are reserved for the owner: managing staff and changing the storefront theme. This means a content manager cannot add new staff or change how the store looks.

If someone forgets their password, the owner creates a reset link for them and passes it on, and the staff member sets a new password through it.

Security

Staff passwords are stored as bcrypt hashes, not as plain text. Session tokens are also stored hashed, so the tokens themselves are not kept in the database.

Why this matters for your store

Separate accounts and roles let you share the work without sharing one password, and keep the most sensitive settings in the owner's hands.

What we verified

We checked the staff tables and role list, the owner-only checks in the cabinet API, the reset link endpoint and how passwords and session tokens are stored.

If you run your store as a team and want to try this setup with your own staff, join early access. We would like to hear which roles you need.