POS access, devices and shifts

Admin → Staff → POS access / Shift reports

Record your hours without signing into the POS

This flow needs the updated POS version and its matching API deployed before installation. This guide does not confirm availability on your installed device.

1. On Sign in on an already enrolled device, tap Show hours. In Time tracking, enter your complete personal 4–6-digit passcode, then confirm it. Checking this status neither starts a shift nor signs you into the POS. Closing returns to PIN sign-in.
2. If no shift is active, tap Clock in to start explicitly. Wait for server confirmation. The active screen shows your actual account role, not an invented job or scheduled shift.
3. During an active shift, Add notes opens an optional note for your employer, limited to 500 characters. Save applies the note to this shift; closing without saving does not apply it.
4. Tap End shift to record your departure. An open cash drawer on the period’s original POS prevents completion: ask an authorized manager to finish its report and close cash on that device, then retry. This flow does not close the drawer or start a Verifone deposit.
5. Once confirmed, Clocked out shows only your relevant shift, its server-recorded dates/times and duration. Recorded hours are not a payroll calculation; missing data does not establish a work schedule. Continue to FoodyPOS returns to the PIN screen without automatically signing into sales.

After rejection, check the personal code and device authorization with a manager. If an action’s result is uncertain, use Refresh hours to verify status before retrying; do not assume failure or create a second clocking event. If unavailable, have the device and API version checked. Never share your passcode or notes with the assistant.

Check the shift-to-device access relationship

This protection requires the compatible API to be deployed; this guide does not confirm installation. PIN sign-in that resumes an existing shift preserves that interval, its start time and its original device authorization. Signing in on another POS or renewing an authorization transfers neither that shift nor its cash drawer.

If the original authorization can no longer be verified in the restaurant, sales sign-in is refused without creating a replacement shift. Depending on the POS version, the displayed error may remain generic. Ask a manager to have support verify the historical relationship. Show hours remains a separate flow for checking your own status; a successful read neither repairs the relationship nor authorizes cash closure. If that read also fails, preserve the state and ask for assistance.

Do not clear local data, re-enroll the device or create a new shift to bypass the refusal. Do not blindly change hours or device assignments: selecting another authorization can hide a different cash journal. A database error does not prove that a reference is missing. Repair must be verified and approved separately while preserving recorded hours, pending operations and original journals. It never automatically closes cash or starts a Verifone deposit.

Current sales/cash access and ending a historical period are checked separately. If the original authorization still exists in this restaurant, expiry, revocation or removal of its hardware link does not erase the period: normal shift end may be offered when its drawer is confirmed closed. This neither renews nor replaces authorization. A missing or foreign original reference still needs review; no replacement device is chosen automatically. See the sign-out check.

Retry an unconfirmed cash-drawer read

This diagnostic needs compatible POS and API versions; this guide does not confirm installation. A failed read does not mean that no drawer is open. The message may identify a shift or sign-in to check, device authorization needing review, an installation that does not match the open shift, or temporarily unavailable verification. Ask a manager about access refusals; Retry reads the state without repairing or moving a relationship. New cash operations stay unavailable until the state is confirmed. Preserve pending operations and local data. See cash-read recovery. Terminal deposit remains separate.

Finish the report before signing out

Sign out in navigation and End shift in More use the same check of your personal work period in the current restaurant. An open drawer linked to that period, even without a sale or movement, or an unconfirmed local cash operation shows Cash drawer report pending. Cancel changes nothing. Finish report opens More → Reports → Cash drawer balance when your permissions allow; it does not count cash, close the drawer or sign you out. Without report access, ask an authorized manager.

Resume an uncertain operation with its existing identity. To close cash, an authorized operator physically counts it on the original POS and confirms closure. Then request sign-out again and confirm End shift. Closing cash alone does not end the period. The server rechecks the period and drawer after confirmation: if the period changed, stay signed in, refresh and confirm the period now shown; do not end a different period using the old confirmation.

The original device authorization may be historical, expired, revoked or no longer linked to current hardware. If it still exists in this restaurant and its drawer is confirmed closed, the period can end without reactivating that authorization or cash access. A missing or foreign numeric reference, error or ambiguous state is not a closed drawer: the session stays open. An incompatible older API may also prevent verification; have the versions checked, then retry.

Local cash journals take priority and must be resolved before leaving the session. Terminal journals are retained in their own recovery flow. This message, shift end and terminal locking never start a Verifone deposit.

Verify a shift end with an uncertain response

On a compatible POS, if the shift-end confirmation is not received, keep the same sign-in and restaurant, then explicitly choose Retry. Foody rereads your current period without sending another end request during this verification. It returns to PIN only when the read confirms no active period, the same POS context is still current and no cash operation is pending. If a period is still active, you stay signed in: cash is checked again and another explicit end confirmation is required. A failed or unconfirmed read keeps you signed in and offers Retry. Resolve any pending cash operation first using its existing identity; do not clear local data. Cancel keeps you signed in but does not undo a shift end already saved. Changing sign-in or restaurant invalidates the in-flight verification. This check does not count cash, close the drawer or start a Verifone deposit. It does not certify physical testing on your device.

Confirmation of a new shift end applies to the period just verified. If it changed or disappeared before recording, the old confirmation is refused; refresh and review the new state before confirming anything. Shift already ended keeps its own confirmation and fresh read; it does not recreate a clock-out. A server version without the compatible check cannot turn a failed read into permission to sign out.

Distinguish reports, cash and card deposits

On a tablet, More → Reports opens Cash drawer balance when your role permits, otherwise permitted Sales or Terminal deposits. The left rail contains only accessible sections. Choosing Cash movements replaces the content within this workspace without stacking another Reports page. Cash movements shows the session loaded on this device with date, type, amount and reason; it is not a history of other sessions. On a phone, Reports remains a destination list. Opening or refreshing a report closes nothing. Closing physical cash and the terminal’s Close and deposit remain separate actions even when both belong to the same end-of-day procedure.

Activate a POS device

Review the restaurant device list and follow the device setup pairing flow. Confirm the device belongs to the intended restaurant before authorizing access.

Use a personal POS code

After activation, use the employee’s personal POS passcode. To change employees, finish the current shift normally from the POS, then enter the next employee’s personal code on Sign in. If a cash-drawer report prevents ending the shift, resolve it with an authorized manager before leaving the session. Do not share a manager session. A separate FoodyAdmin sign-in does not change the employee signed into the POS.

After an update or an employee change, an online profile read may be needed to restore your permissions. Another employee’s last known access is not reused. Restore the network connection; if access remains unavailable, ask a manager. Keep pending operations and do not erase terminal data.

The personal passcode must differ from those of other accounts configured in this restaurant. The same code may be used in a different restaurant. The displayed profile must belong to the employee whose personal code was recognized. If a code matches several accounts configured in the same restaurant, sign-in and time tracking are refused with a generic error: no new sales session or clock-in is created. The refusal does not identify those accounts. Ask a manager or support to check access, without repeated attempts or erasing terminal data.

Review shift reports

Choose the report period and employee/device filters, then inspect recorded start/end times. A missing end time must be investigated rather than assumed closed.

Finish a shift with an open cash drawer

If End shift says the cash drawer is open, open More → Reports → Cash drawer balance on the same enrolled POS. Resolve any pending cash operation, count the physical cash and close that device's cash session before trying End shift again. The shift is not ended by a Verifone card-batch deposit, and ending a shift does not itself transmit a card batch. If the count or payment result is uncertain, reconcile it with an authorized manager instead of forcing a sign-out or taking a second payment.

Read the cash-drawer report on a handheld

More → Reports → Cash drawer uses a vertical page on a handheld terminal. Amounts, sessions, permissions and confirmations retain their existing behavior. Colors and insets do not turn a report into a drawer closure or a card deposit.

Confirm locking after an already ended period

This flow needs compatible API and POS versions; this guide does not confirm installation. After Sign out, Shift already ended means that no active period was found for your account in this restaurant. It is not inferred from a cash-access error. Cancel keeps you signed in. Lock terminal requires explicit confirmation and rereads the state before returning to PIN, without sending another shift-end request.

If a period appears meanwhile, the sign-in or restaurant changes, the read fails or a local cash operation is pending, locking is not confirmed. Preserve the data, resolve the operation through its own flow, then retry. Terminal payment journals are retained. Locking closes no drawer, creates no period and reactivates no device authorization.