Minimum order checks, staff access controls and general bug fixes

Improvements

• Staff permissions are now applied more strictly across the app. Staff can only reschedule draft orders from the Shopify admin for locations they have access to, and opening an order's details now needs the Orders permission as well as access to that location, so each team member sees only what you've given them.

• Location header images and icons now have a size limit of 8,192 pixels on each side (16 megapixels in total), alongside the existing 2MB file limit. Uploading and cropping a normal image works just as before.

• We've also made a number of behind-the-scenes security improvements to how Zapiet Eats checks account and location access, helping keep your data safe.

Bug fixes

• Minimum order amounts are now checked against the final cart prices, so an order can no longer reach checkout below the minimum you've set.

• Cancelling an order now only releases capacity from that order's own location and menu. Previously, a cancellation could lower the order count for a different location, which affected its order limits and preparation times.

• Automatic staff access now only applies when a staff member's email domain exactly matches the domain you've set. Lookalike addresses can no longer pick up permissions meant for your team, and subdomains only qualify when you add them yourself.