Records & reporting
Who should have access to sensitive reports in a jewellery shop?
Give sensitive reporting a clear owner and a practical access policy. Staff should know which records they need for their work, who can approve an export and where downloaded reports belong.
A colleague needs a report for a genuine shop task. Nobody is sure who holds the supervisor password, so somebody forwards an old export instead. It solves the immediate question while creating another copy of sensitive information that may already be out of date.
Decide responsibility before the request arrives
List the reporting tasks your shop carries out and the people responsible for them. Daily trading checks, accountant handovers and customer enquiries need different information. Agree which requests should go through the owner or manager.
Keep handling deliberate. Avoid treating it as a shared convenience that everybody needs for ordinary work. If a report requires supervisor approval, make the route to that approval clear enough that staff do not invent a workaround.
- Identify who approves sensitive report exports.
- Explain how colleagues should request the information they need.
- Choose an appropriate place for downloaded reports.
- Review the arrangement when somebody changes role or leaves.
Access inside the system is only part of the process. Once a file is downloaded, its handling matters too. Check the recipient and purpose before sending it, and avoid leaving copies in a shared folder simply because that is where a previous export went.
See it in Stockbox
The supervisor password recording edits a system user, changes and confirms the password, then saves it. The reporting guide separately demonstrates supervisor access for Master Export.
Keep the handover workable
A manager should understand the involved before changing access. Arrange a sensible handover so legitimate reporting can continue, and check the change using the intended account. Do not assume that a saved password change has also tidied up old downloaded files.
For example, when responsibility for the accountant's monthly report moves to another colleague, review both system access and the folder used for exports. Explain the date range, file naming and checking steps alongside the password process.
Never put a supervisor password into a customer note or a stock description. Use your shop's agreed secure method for handling credentials. The customer-facing record should contain information about the transaction, not a shortcut to wider system access.
A practical access review
- Confirm the current owner of each sensitive reporting task.
- Check that authorised staff can complete their work.
- Review who can reach stored exports outside the system.
- Remove obsolete copies through your agreed retention process.
The aim is a dependable routine, with a clear answer when somebody asks for a report. A password alone cannot provide that routine. Responsibility, file handling and a well-explained handover are what make access manageable during a busy trading day.
