Deprixa Plus — Pre-Alerts · Permissions
Pre-Alerts is one of the few modules where Customer-role users hold permissions by default, enabling them to create pre-alerts from their My Locker dashboard.
| Permission | Capability | Default Roles |
|---|---|---|
| pre-alerts.view | View pre-alerts. Admins/Employees see all pre-alerts across all customers. Customers see only their own (scoped to customer_id = Auth::id()). | Admin, Employee, Customer |
| pre-alerts.create | Create new pre-alert records. Customers create pre-alerts for their own locker. Staff can create on behalf of any customer. | Admin, Employee, Customer |
| pre-alerts.manage | Perform admin actions: mark as received, convert to shipment, cancel, delete, and manage attachments. Staff-only operation. | Admin only |
Customer Data Scoping
When a user with the customer role accesses pre-alerts — whether through the admin panel or the /my-locker view — the system automatically scopes all queries to customer_id = Auth::id(). Customers can never view or modify other customers' pre-alerts.