Store Manager Permissions appear to allow a contributor access to edit page content in the rest of the site

I am trying to set up one of my clients' staff members with Store Manager access so that she can manage orders. She is not meant to have access to edit content or styles on the site's general pages.

When I set myself up via a test email address with the same privileges as I have given this staff member (Store Manager), the options listed in the admin panel ARE diminished. However, even though "Styles" and "Assets" are not listed under "Website," the option to edit "Pages" is listed. This gives clear and full access to a Store Manager to edit the content and styles of any block of any page on the site, add/delete sections, edit the footer...really, it's pretty much full editor access without having assigned them any "website editor" privileges at all as listed in the permissions structure.

I've attached a side-by-side photo showing how I am logged in with two different emails, one with owner privileges (left) and one with only Store Manager privileges (right). You can clearly see how "Pages" is listed as a navigation item in the Store Manager admin panel. I can confirm that the same page editing access one has as an owner or admin is conferred via that "Pages" link in the Store Manager admin panel, too.

Does anyone know how to give access to the store's data/functions without giving access to edit the rest of the site content?

I suspect nothing has changed so this isn't a bug.

The issue is that SS's permission system is really inadequate to the task of operating a moderately complex site in terms of member access needs. SS's model is pretty much designed from a single user model and they've patched on some minimal top level restrictions.

The Store manager level can...

Quote

They can also add some content like blog posts and events.

Given that there is no concept of page level permissions or even finer grained control, SS pretty much has to have all page content open for the Store manager contributor.

@creedon Thanks for your confirmation of what I had suspected....that Squarespace wasn't being forthright in their description of a Store Manager's privileges when they describe the access as "some content like blog posts and events." It's ALL the content of the business site, and that's too much access for some commerce clients' staff members.  

I wonder if the Squarespace development team has considered including a contributor user case that would offer limited store access -- to the products and order data only -- and not the rest of the site. I think of this level not as a Store Manager, but as a Store Associate. An associate would not have the keys to the shop or access to the POS settings, but they would know how to stock the shelves, make sales, and issue refunds.

I have several clients for whom I have commerce enabled on their sites who rely on staff to administer inventory, fulfillment, or custom checkout form data. They don't necessarily want these staff members to have access to make changes to the rest of the web site's page.

I just submitted a feature request via the Contact Us / Squarespace Circle / Feature Request option. We'll see what they say!

@MeridithBP You may want to upvote and add some commentary to this request 🙂.