fix: enforce PIN authentication for new POS sessions while bypassing for existing session unlocks

README.md

@@ -19,7 +19,7 @@ This Odoo 19 module enhances the security and auditability of the Point of Sale
 - **UI Streamlining - Button Renaming**: Renames the "Basic Receipt" button to "Table Checker" (on both the action pad and print success screen) for clearer pre-payment table verification.
 - **Automatic Table Checker on Send**: Automatically prints a "Table Checker" (Basic Receipt) whenever the employee clicks the kitchen "Send" button to submit changes.
 - **Incremental Printing on Send**: When additional items are added to an already sent order, the automatic print on "Send" is filtered to print *only the newly added (additional) items*, preventing duplicate printing of already served items.
-- **Unlock Register PIN/Selection Bypass**: Bypasses the PIN prompt and employee selection when unlocking/opening the register. It unlocks directly with the current/last cashier since actions (table selection, payment, loading order, register order) are already PIN-protected.
+- **Unlock Register PIN/Selection Bypass**: Bypasses the PIN prompt and employee selection when unlocking the register. It unlocks directly with the current/last cashier. Note that opening the register (new session) still requires PIN entry.
 - **Stay on Current Order on Send**: Retains the POS UI on the current table/order screen after clicking "Send" rather than returning to the Floor Screen (table view).
 
 

static/src/app/screens/login_screen/login_screen.js

@@ -10,6 +10,11 @@ patch(LoginScreen.prototype, {
             return;
         }
 
+        if (this.pos.session.state !== "opened") {
+            super.openRegister();
+            return;
+        }
+
         const currentCashier = this.pos.getCashier();
         if (currentCashier) {
             this.cashierLogIn();