Update to Staff permissions
There is currently no way to limit staff to only these specific tabs (they MUST have the main Staff Tab) in the Staff Module and there is no breakout of permissions to view versus make changes in each tab – there is only the overall “Change” permission which of course would allow them to change the Staff Tab (including someone’s username, password, or Active status).
My thoughts of possible enhancements:
Add a specific permission to be able to make changes to the Staff Tab (versus view-only).
Move the access control fields from Staff Tab to Role Tab (username, password, Active) – we could then limit someone’s ability to provide or deny access based on whether they have the Role Tab or not.