[SECURITY] +access pos users and managers to pos receipt object