[SECURITY] +some new access for pos_user group