It would be nice.... *REALLY* nice... to have a separate role for "Store Managers".
RIght now, in order for me to give the warehouse the ability to see orders and so forth, I have to make them administrators. Not cool. Additionally, it shows the CC No's and so forth; not PCI compliant. Not cool again.
So, a "Store Manager" role, would allow a store manager limited access. Reports, the ability to look at an order, but not to look at payment information, and so forth.
What would be the cat's meow is to be able to grant access on different levels; for example, one role ("Store Manager", perhaps) could see everything, but not have DNN Administrator access. Another role, ("Warehouse", for example), could see orders, but not CC numbers, and couldn't "change" anything.
This granular level of control would allow the people (for example, warehouse workers) to see the orders, but not be able to change anything. The "Store Manager" would be able to change things, see reports, and so forth, but optionally not see CC Numbers. Perhaps the ability to see CC numbers would be another role ("Accounting")?
Anyway... a level of control over what different roles could see / not see would be fantastic, and certainly would secure the cart in a much more compliant way.
.... not to mention, it would keep people from making changes to the page, modules, etc. which they could do now as DNN Admins.