The security module can only be accessed by the system manager and passwords are encrypted in the system files. The permissions are fairly straightforward to set up for each user and include function by function, ledger by ledger add/edit/delete/view/report options. This module recently rewritten has a good general comprehensive sense of granular authorisation.