fix security for cashier role