Supplier Permissions

Once a Brand-Supplier connection is established, the Brand controls exactly what the Supplier can access in the catalog.

Permission Model

Permissions are scoped at three levels:

Level	Scope	Example
Catalog	Entire Brand catalog	Full access or read-only
Product line	A group of blind types	Access to Roller Blinds only
Fabric	Individual fabric records	Access to specific colorways

Permissions are cached in Redis under supplier:{id}:brand_access:{brand_id} for low-latency lookups during API calls.

Granting Access

1. Go to Connections → Suppliers and open the Supplier's profile.
2. Click Manage Permissions.
3. Toggle individual product lines or fabrics on/off.
4. Click Save Permissions.

The Supplier is notified of permission changes via a Kafka event (BrandPermissionsUpdated). Their cached permissions are invalidated immediately.

Permission Types

Read Access

The Supplier can view and import catalog data but cannot modify it. This is the default for all connected Suppliers.

Import Access

The Supplier can import fabrics and blind types into their own tenant database and build products from them. Without this flag, the Supplier can browse your catalog but not use it.

Pricing Visibility

Controls whether the Supplier can see your recommended retail prices (RRPs). By default, Suppliers only see the trade price.

Revoking Access

To revoke a Supplier's access to a specific product line:

1. Go to Connections → Suppliers → Manage Permissions.
2. Toggle off the relevant product line or fabric.
3. Save.

Note: Revoking access does not delete products the Supplier has already imported. However, those products will no longer receive automatic catalog updates from your Brand.

Terminating a Connection

To completely end a Brand-Supplier relationship:

1. Go to Connections → Suppliers.
2. Click the three-dot menu next to the Supplier.
3. Select Terminate Connection.
4. Confirm the action.

WARNING

This immediately revokes all permissions and stops future catalog sync events. Previously imported data in the Supplier's tenant remains until the Supplier removes it.

Audit Log

All permission changes are logged. Navigate to Settings → Audit Log and filter by type permission_change to review the history.