10% OFF
Website Exclusive Promotion 10% discount for new customers. Offer expires 30th June 2026.
Use code: JIFFYWEB10

Plugin Documentation

Documentation
← Back

Locked Documents Explained

2 March 2026 jiffytrade Documents

JiffyTrade uses a double-locking system to protect document integrity.

This ensures your business records cannot be accidentally modified, altered, or permanently removed after key lifecycle events.


1️⃣ Manual Locking

Users can manually lock documents to prevent further editing.

Manual locking is useful for:

  • Finalised invoices
  • Completed jobs
  • Documents already agreed with customers
  • Internal approval workflows

Once manually locked:

  • The document cannot be edited
  • Unlocking requires appropriate permission (controlled via RBAC)

2️⃣ Automatic System Locking

In addition to manual locking, JiffyTrade automatically locks documents at critical moments.

Documents are automatically locked when:

  • A document is sent to a customer
  • A quote is converted into an invoice
  • A reminder email is sent
  • An invoice is marked as paid

This automatic protection ensures:

  • Sent documents cannot be edited retroactively
  • Paid invoices cannot be altered
  • Converted quotes preserve original pricing
  • Your financial records remain consistent

3️⃣ Why This Matters

Altering sent or paid documents can create serious accounting inconsistencies.

The locking system protects:

  • Your business credibility
  • Your tax records
  • Your audit trail
  • Your customer agreements
  • Your legal defensibility

Once a document has been issued externally, it should not change silently.


4️⃣ Deleting Locked Documents

Locked documents:

  • Cannot be edited
  • May still be moved to Trash (depending on permissions)

However:

Permanent deletion can be restricted using RBAC.

This prevents:

  • Accidental destruction of financial records
  • Staff permanently removing invoices
  • Loss of audit history

5️⃣ Strengthening Protection with RBAC

You can reinforce document protection using:

My Business → Settings → Permissions (RBAC)

For maximum security, configure:

  • Only Plugin Super Administrators can permanently delete documents
  • Only Plugin Super Administrators can mark invoices as paid
  • Only authorised roles can send documents to customers

This ensures:

  • The paper trail cannot be lost
  • Trashed documents remain recoverable
  • Only authorised users can remove records permanently
  • Financial records remain accurate

RBAC adds a second layer of protection on top of locking.


6️⃣ Best Practice Recommendation

For most businesses, we recommend:

✔ Allow staff to create and edit documents
✔ Allow staff to move documents to Trash
✔ Restrict permanent deletion to Plugin Super Administrators
✔ Restrict unlocking permissions to senior roles

This ensures:

  • Operational flexibility
  • Strong audit protection
  • Reduced risk of accidental damage
  • Controlled financial authority

🔐 Summary

JiffyTrade’s double-locking system exists to protect your records — not restrict your workflow.

When combined with a properly configured RBAC policy, it creates a secure, audit-safe document environment suitable for professional business use.