Authorization

Checking what a signed-in person may do. Maya may see her own orders, but only staff such as Jo may change stock.