diff --git a/app/controllers/activities_controller.rb b/app/controllers/activities_controller.rb
index 1dacda3f9..6decfedf6 100644
--- a/app/controllers/activities_controller.rb
+++ b/app/controllers/activities_controller.rb
@@ -10,7 +10,7 @@ class ActivitiesController < ApplicationController # rubocop:disable Metrics/Cla
 
   def index
     authorize Activity
-    @activities = policy_scope(Activity.includes(%i[price_list created_by])
+    @activities = policy_scope(Activity.includes(%i[price_list created_by locked_by])
                                    .order(start_time: :desc)
                                    .page(params[:page]))
 
@@ -19,7 +19,7 @@ def index
       end_time: 6.hours.from_now.beginning_of_hour
     )
 
-    @price_lists_json = PriceList.all.to_json(only: %i[id name])
+    @price_lists_json = PriceList.unarchived.to_json(only: %i[id name])
   end
 
   def create
@@ -63,8 +63,7 @@ def destroy
 
   def show # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
     @activity = Activity.includes(:price_list,
-                                  { orders: [{ order_rows: :product }, :user, :created_by] },
-                                  credit_mutations: [:user]).find(params[:id])
+                                  { orders: [{ order_rows: :product }, :user, :created_by] }).find(params[:id])
     authorize @activity
 
     @price_list = @activity.price_list
@@ -122,8 +121,9 @@ def order_screen # rubocop:disable Metrics/MethodLength, Metrics/AbcSize
   def product_totals
     authorize Activity
 
-    activity = Activity.includes(:price_list, orders: [{ order_rows: :product }, :user]).find(params[:id])
-    render json: activity.count_per_product(**params.permit(:user, :paid_with_pin, :paid_with_cash).to_h.symbolize_keys)
+    permitted_params = params.permit(:id, :user, :paid_with_pin, :paid_with_cash)
+    activity = Activity.includes(:price_list, orders: [{ order_rows: :product }, :user]).find(permitted_params[:id])
+    render json: activity.count_per_product(**permitted_params.except(:id).to_h.symbolize_keys)
   end
 
   def sumup_callback
diff --git a/app/controllers/credit_mutations_controller.rb b/app/controllers/credit_mutations_controller.rb
index 4ed43df97..ddd09bc0f 100644
--- a/app/controllers/credit_mutations_controller.rb
+++ b/app/controllers/credit_mutations_controller.rb
@@ -1,12 +1,14 @@
 class CreditMutationsController < ApplicationController
   before_action :authenticate_user!
   after_action :verify_authorized
+  after_action :verify_policy_scoped, only: :index
 
   def index
-    @credit_mutations = CreditMutation.includes(model_includes)
+    authorize CreditMutation
+
+    @credit_mutations = policy_scope(CreditMutation.includes(model_includes)
                                       .order(created_at: :desc)
-                                      .page params[:page]
-    authorize @credit_mutations
+                                      .page(params[:page]))
 
     @new_mutation = CreditMutation.new
   end
diff --git a/app/controllers/invoices_controller.rb b/app/controllers/invoices_controller.rb
index 345b36547..ea5c788c2 100644
--- a/app/controllers/invoices_controller.rb
+++ b/app/controllers/invoices_controller.rb
@@ -6,7 +6,7 @@ class InvoicesController < ApplicationController
   def index
     authorize Invoice
 
-    @invoices = Invoice.all.order(created_at: :desc)
+    @invoices = Invoice.includes(:user, :activity, :rows).order(created_at: :desc)
     @activities_json = Activity.all.to_json(only: %i[id title start_time])
     @invoice = Invoice.new
     @invoice.rows.build
diff --git a/app/controllers/orders_controller.rb b/app/controllers/orders_controller.rb
index 5a129a31e..73496787d 100644
--- a/app/controllers/orders_controller.rb
+++ b/app/controllers/orders_controller.rb
@@ -55,7 +55,7 @@ def destroy
 
     authorize @order
 
-    if @order.activity.locked?
+    if @order.activity&.locked?
       render json: {}, status: :forbidden
     else
       @order.order_rows.each do |order_row|
diff --git a/app/controllers/price_lists_controller.rb b/app/controllers/price_lists_controller.rb
index 6a1a02ec3..31783b5ed 100644
--- a/app/controllers/price_lists_controller.rb
+++ b/app/controllers/price_lists_controller.rb
@@ -2,12 +2,13 @@ class PriceListsController < ApplicationController
   before_action :authenticate_user!
 
   after_action :verify_authorized
+  after_action :verify_policy_scoped, only: :index
 
   def index
-    price_lists = PriceList.order(created_at: :desc)
-    products = Product.all.order(:id).includes(:product_prices)
+    authorize PriceList
 
-    authorize price_lists
+    price_lists = policy_scope(PriceList.order(created_at: :desc))
+    products = Product.all.order(:id).includes(:product_prices)
 
     @price_list = PriceList.new
 
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 7255bf066..ba7e6d785 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -6,9 +6,9 @@ class UsersController < ApplicationController # rubocop:disable Metrics/ClassLen
   def index # rubocop:disable Metrics/AbcSize, Metrics/MethodLength
     authorize User
 
-    @manual_users = User.manual.active.order(:name)
-    @amber_users = User.in_amber.active.order(:name)
-    @inactive_users = User.inactive.order(:name)
+    @manual_users = User.manual.active.order(:name).select { |u| policy(u).show? }
+    @amber_users = User.in_amber.active.order(:name).select { |u| policy(u).show? }
+    @inactive_users = User.inactive.order(:name).select { |u| policy(u).show? }
     @users_credits = User.calculate_credits
 
     @manual_users_json = @manual_users.as_json(only: %w[id name])
diff --git a/app/javascript/components/activity/ProductTotals.vue b/app/javascript/components/activity/ProductTotals.vue
index 83aa4e142..960c83798 100644
--- a/app/javascript/components/activity/ProductTotals.vue
+++ b/app/javascript/components/activity/ProductTotals.vue
@@ -23,6 +23,13 @@
             <td>{{orderTotal.amount}} x</td>
             <td class="text-end">{{doubleToCurrency(orderTotal.price)}}</td>
           </tr>
+          <tr>
+            <th scope="col">Totaal</th>
+            <td></td>
+            <td class="text-end">
+              <strong>{{doubleToCurrency(totalAmount)}}</strong>
+            </td>
+          </tr>
         </tbody>
       </table>
       <table v-else class="table table-striped">
@@ -56,6 +63,7 @@ export default {
     return {
       user: {},
       orderTotals: [],
+      totalAmount: 0.0,
       isLoading: true
     };
   },
@@ -71,6 +79,7 @@ export default {
       let params = {user: this.user.id, paid_with_cash: this.user.paid_with_cash, paid_with_pin: this.user.paid_with_pin};
       this.$http.get('/activities/'+this.activity+'/product_totals', { params }).then((response) => {
         this.orderTotals = response.body;
+        this.totalAmount = this.orderTotals.reduce((a, b) => a + parseFloat(b.price), 0.0);
         this.isLoading = false;
       });
     },
diff --git a/app/javascript/components/user/UsersTable.vue b/app/javascript/components/user/UsersTable.vue
index cd648a70b..049919cce 100644
--- a/app/javascript/components/user/UsersTable.vue
+++ b/app/javascript/components/user/UsersTable.vue
@@ -26,7 +26,9 @@
       <tbody class="table-group-divider">
         <tr v-for="user in sortedUsers" :key="user.id">
           <th class="ps-4" aria-colindex="1">{{ user.id }}</th>
-          <td><a :href="`/users/${user.id}`" aria-colindex="2">{{ user.name }}</a></td>
+          <td>
+            <a :href="`/users/${user.id}`" aria-colindex="2">{{ user.name }}</a>
+          </td>
           <td :class="user.credit < 0 ? 'text-danger' : ''" aria-colindex="3">€ {{parseFloat(user.credit).toFixed(2)}}</td>
         </tr>
       </tbody>
@@ -53,7 +55,7 @@ export default {
     users: {
       type: Array,
       required: true
-    }
+    },
   },
 
   data() {
diff --git a/app/javascript/packs/activity.js b/app/javascript/packs/activity.js
index 8a59eeaba..839096a72 100644
--- a/app/javascript/packs/activity.js
+++ b/app/javascript/packs/activity.js
@@ -12,11 +12,18 @@ document.addEventListener('turbolinks:load', () => {
 
   var element = document.getElementById('activity');
   if (element !== null) {
+    // Create a Vue instance for the ProductTotals component
     new Vue({
       el: element,
       components: {
         ProductTotals
       }
     });
+
+    // Selects the first visible tab in the activity detail tabs
+    var firstTabEl = document.querySelector('#activityTabs li:first-child a');
+    /* eslint-disable no-undef */
+    var firstTab = new bootstrap.Tab(firstTabEl);
+    firstTab.show();
   }
 });
diff --git a/app/models/credit_mutation.rb b/app/models/credit_mutation.rb
index 711c15b5e..6a2f48bb2 100644
--- a/app/models/credit_mutation.rb
+++ b/app/models/credit_mutation.rb
@@ -8,6 +8,10 @@ class CreditMutation < ApplicationRecord
 
   validate :activity_not_locked
 
+  scope :linked_to_activity, (lambda {
+    where.not(activity: nil)
+  })
+
   before_destroy -> { throw(:abort) }
 
   def activity_not_locked
diff --git a/app/models/order_row.rb b/app/models/order_row.rb
index 407de1d78..aba802773 100644
--- a/app/models/order_row.rb
+++ b/app/models/order_row.rb
@@ -18,7 +18,9 @@ def copy_product_price
   end
 
   def no_changes_of_product_count_allowed
-    errors.add(:product_count, 'cannot be altered') if !new_record? && product_count_changed? && order.activity.locked?
+    return unless !new_record? && product_count_changed? && order.activity.locked?
+
+    errors.add(:product_count, 'cannot be altered because the activity is locked')
   end
 
   def no_changes_of_price_per_product_allowed
diff --git a/app/models/price_list.rb b/app/models/price_list.rb
index 0b2fcca5c..dff0a3006 100644
--- a/app/models/price_list.rb
+++ b/app/models/price_list.rb
@@ -5,6 +5,8 @@ class PriceList < ApplicationRecord
 
   validates :name, presence: true
 
+  scope :unarchived, (-> { where(archived_at: nil) })
+
   def product_price_for(product)
     @product_price ||= ProductPrice.includes(:product).where(price_list: self)
     @product_price.find { |pp| pp.product == product }
diff --git a/app/models/role.rb b/app/models/role.rb
index 779a9ad66..55d9a47a2 100644
--- a/app/models/role.rb
+++ b/app/models/role.rb
@@ -1,5 +1,5 @@
 class Role < ApplicationRecord
-  enum role_type: { treasurer: 0, main_bartender: 1 }
+  enum role_type: { treasurer: 0, main_bartender: 1, renting_manager: 2 }
 
   validates :role_type, :group_uid, presence: true
   has_many :roles_users, class_name: 'RolesUsers', dependent: :destroy, inverse_of: :role
@@ -10,6 +10,8 @@ def name
       Rails.application.config.x.treasurer_title.capitalize
     elsif main_bartender?
       'Hoofdtapper'
+    elsif renting_manager?
+      'Verhuur manager'
     end
   end
 end
diff --git a/app/models/user.rb b/app/models/user.rb
index 04a78dc63..086e3d444 100644
--- a/app/models/user.rb
+++ b/app/models/user.rb
@@ -65,6 +65,10 @@ def main_bartender?
     @main_bartender ||= roles.where(role_type: :main_bartender).any?
   end
 
+  def renting_manager?
+    @renting_manager ||= roles.where(role_type: :renting_manager).any?
+  end
+
   def update_role(groups)
     roles_to_have = Role.where(group_uid: groups)
     roles_users_to_have = roles_to_have.map { |role| RolesUsers.find_or_create_by(role: role, user: self) }
diff --git a/app/policies/activity_policy.rb b/app/policies/activity_policy.rb
index 66a7ce0a1..c92b4b72b 100644
--- a/app/policies/activity_policy.rb
+++ b/app/policies/activity_policy.rb
@@ -1,7 +1,7 @@
 class ActivityPolicy < ApplicationPolicy
   class Scope < Scope
     def resolve
-      if user&.treasurer?
+      if user&.treasurer? || user&.renting_manager?
         scope
       elsif user&.main_bartender?
         scope.not_locked
@@ -10,11 +10,11 @@ def resolve
   end
 
   def create?
-    user&.treasurer? || user&.main_bartender?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
   def update?
-    user&.treasurer? || user&.main_bartender?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
   def lock?
@@ -26,18 +26,26 @@ def create_invoices?
   end
 
   def destroy?
-    user&.treasurer? || user&.main_bartender?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
-  def activity_report?
-    user&.treasurer?
+  def order_screen?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
-  def order_screen?
-    user&.treasurer? || user&.main_bartender?
+  def summary?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
   def product_totals?
-    user&.treasurer? || user&.main_bartender?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
+  end
+
+  def orders?
+    user&.treasurer? || user&.renting_manager?
+  end
+
+  def credit_mutations?
+    user&.treasurer?
   end
 end
diff --git a/app/policies/application_policy.rb b/app/policies/application_policy.rb
index fa8cc4a04..91965a362 100644
--- a/app/policies/application_policy.rb
+++ b/app/policies/application_policy.rb
@@ -7,7 +7,7 @@ def initialize(user, record)
   end
 
   def index?
-    user&.treasurer? || user&.main_bartender?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
   def show?
@@ -31,7 +31,7 @@ def edit?
   end
 
   def destroy?
-    user&.treasurer? || user&.main_bartender?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
   def scope
diff --git a/app/policies/credit_mutation_policy.rb b/app/policies/credit_mutation_policy.rb
index cd9124f39..60ab794dc 100644
--- a/app/policies/credit_mutation_policy.rb
+++ b/app/policies/credit_mutation_policy.rb
@@ -1,5 +1,19 @@
 class CreditMutationPolicy < ApplicationPolicy
-  def create?
+  class Scope < Scope
+    def resolve
+      if user&.treasurer?
+        scope
+      elsif user&.main_bartender?
+        scope.linked_to_activity
+      end
+    end
+  end
+
+  def index?
     user&.treasurer? || user&.main_bartender?
   end
+
+  def create?
+    user&.treasurer? || (user&.main_bartender? && record.activity.present?)
+  end
 end
diff --git a/app/policies/invoice_policy.rb b/app/policies/invoice_policy.rb
index 781bb644f..bbc1f1f13 100644
--- a/app/policies/invoice_policy.rb
+++ b/app/policies/invoice_policy.rb
@@ -1,6 +1,6 @@
 class InvoicePolicy < ApplicationPolicy
   def index?
-    user&.treasurer?
+    user&.treasurer? || user&.renting_manager?
   end
 
   def send_invoice?
diff --git a/app/policies/order_policy.rb b/app/policies/order_policy.rb
index b75e8b1ce..31b5db26d 100644
--- a/app/policies/order_policy.rb
+++ b/app/policies/order_policy.rb
@@ -1,7 +1,7 @@
 class OrderPolicy < ApplicationPolicy
   class Scope < Scope
-    def resolve
-      if user&.treasurer? || user&.main_bartender?
+    def resolve # rubocop:disable Metrics/CyclomaticComplexity, Metrics/PerceivedComplexity
+      if user&.treasurer? || user&.renting_manager? || user&.main_bartender?
         scope
       elsif user
         scope.orders_for(user)
@@ -14,6 +14,6 @@ def index?
   end
 
   def create?
-    user&.treasurer? || user&.main_bartender?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 end
diff --git a/app/policies/price_list_policy.rb b/app/policies/price_list_policy.rb
index a28c98dec..545464094 100644
--- a/app/policies/price_list_policy.rb
+++ b/app/policies/price_list_policy.rb
@@ -1,10 +1,20 @@
 class PriceListPolicy < ApplicationPolicy
+  class Scope < Scope
+    def resolve
+      if user&.treasurer?
+        scope
+      elsif user&.renting_manager? || user&.main_bartender?
+        scope.unarchived
+      end
+    end
+  end
+
   def index?
-    user&.treasurer? || user&.main_bartender?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
   def show?
-    user&.treasurer? || user&.main_bartender?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
   def create?
diff --git a/app/policies/user_policy.rb b/app/policies/user_policy.rb
index 80b8604e3..98a09333d 100644
--- a/app/policies/user_policy.rb
+++ b/app/policies/user_policy.rb
@@ -1,6 +1,6 @@
 class UserPolicy < ApplicationPolicy
   def index?
-    user&.treasurer?
+    user&.treasurer? || user&.renting_manager? || user&.main_bartender?
   end
 
   def refresh_user_list?
@@ -12,7 +12,7 @@ def search?
   end
 
   def show?
-    user&.treasurer? || record == user
+    user&.treasurer? || (user&.renting_manager? && User.manual.exists?(id: record)) || record == user
   end
 
   def json?
@@ -20,6 +20,6 @@ def json?
   end
 
   def activities?
-    user&.treasurer? || record == user
+    show?
   end
 end
diff --git a/app/views/activities/index.html.erb b/app/views/activities/index.html.erb
index b2693cf2d..96cfa8e34 100644
--- a/app/views/activities/index.html.erb
+++ b/app/views/activities/index.html.erb
@@ -47,7 +47,11 @@
                 <%= activity.price_list.name %>
               </td>
               <td>
-                <%= link_to activity.created_by.name, activity.created_by %>
+                <% if policy(activity.created_by).show? %>
+                  <%= link_to activity.created_by.name, activity.created_by %>
+                <% else %>
+                  <%= activity.created_by.name %>
+                <% end%>
               </td>
             </tr>
           <% end %>
diff --git a/app/views/activities/show.html.erb b/app/views/activities/show.html.erb
index 46d429286..24a97315c 100644
--- a/app/views/activities/show.html.erb
+++ b/app/views/activities/show.html.erb
@@ -3,7 +3,7 @@
   <%= render 'edit_modal' %>
 <% end %>
 
-<div id="activity" class="container footer-padding">
+<div id="activity" class="container footer-padding mt-4">
   <div class="row justify-content-between">
     <div class="col-sm-12 col-md-6 py-2">
       <h1>
@@ -68,7 +68,7 @@
               </div>
             </div>
           <% end %>
-        <% else %>
+        <% elsif policy(Activity).order_screen? %>
           <p class="card-text">
             Je kan bestellingen plaatsen in het streepscherm.
           </p>
@@ -78,6 +78,12 @@
               <%= fa_icon 'calculator', class: 'ms-1' %>
             <% end %>
           </div>
+        <% else %>
+          <div class="card-text">
+            <div class="alert alert-success">
+              Op deze activiteit kan nog gestreept worden.
+            </div>
+          </div>
         <% end %>
       </div>
     </div>
@@ -87,172 +93,188 @@
   <div class="row">
     <div class="col-sm-12">
       <ul class="nav nav-tabs" id="activityTabs" role="tablist">
-        <li class="nav-item">
-          <a aria-controls="summary" aria-selected="true" class="nav-link active" data-bs-toggle="tab" href="#summary" id="summary-tab" role="tab">
-            Samenvatting
-          </a>
-        </li>
+        <% if policy(Activity).summary? %>
+          <li class="nav-item">
+            <a aria-controls="summary" aria-selected="true" class="nav-link active" data-bs-toggle="tab" href="#summary" id="summary-tab" role="tab">
+              Samenvatting
+            </a>
+          </li>
+        <% end %>
+        <% if policy(Activity).credit_mutations? %>
         <li class="nav-item">
           <a aria-controls="credit_mutations" aria-selected="false" class="nav-link" data-bs-toggle="tab" href="#credit_mutations" id="credit_mutations-tab" role="tab">
             Inleg en correcties
           </a>
         </li>
-        <% if current_user.treasurer? %>
+        <% end %>
+        <% if policy(Activity).orders? %>
           <li class="nav-item">
             <a aria-controls="orders" aria-selected="false" class="nav-link" data-bs-toggle="tab" href="#orders" id="orders-tab" role="tab">
               Bestellingen
             </a>
           </li>
         <% end %>
-        <li class="nav-item">
-          <a aria-controls="product_totals-tab" aria-selected="false" class="nav-link" data-bs-toggle="tab" href="#product_totals" id="product_totals-tab" role="tab">
-            Producttotalen
-          </a>
-        </li>
+        <% if policy(Activity).product_totals? %>
+          <li class="nav-item">
+            <a aria-controls="product_totals-tab" aria-selected="false" class="nav-link" data-bs-toggle="tab" href="#product_totals" id="product_totals-tab" role="tab">
+              Producttotalen
+            </a>
+          </li>
+        <% end %>
       </ul>
       <div class="tab-content p-2" id="activityTabsContent">
-        <div aria-labelledby="summary-tab" class="tab-pane show active" id="summary" role="tabpanel">
-          <div class="row justify-content-between">
-            <% if @credit_mutations.empty? && @orders.empty? %>
-              <div class="table-responsive">
-                <table class="table table-striped">
-                  <tbody>
+        <% if policy(Activity).summary? %>
+          <div aria-labelledby="summary-tab" class="tab-pane show active" id="summary" role="tabpanel">
+            <div class="row justify-content-between">
+              <% if @credit_mutations.empty? && @orders.empty? %>
+                <div class="table-responsive">
+                  <table class="table table-striped">
+                    <tbody>
+                    <tr>
+                      <td class="text-center" colspan="4">
+                        <p class="my-1">
+                          <em>
+                            Er zijn nog geen bestellingen en er is nog niet ingelegd
+                          </em>
+                        </p>
+                      </td>
+                    </tr>
+                    </tbody>
+                  </table>
+                </div>
+              <% else %>
+                <div class="col-12 col-md-6">
+                  <table class="table table-sm">
+                    <thead>
+                    <tr>
+                      <th scope="col">Resultaat</th>
+                      <th scope="col">Code</th>
+                      <th class="text-end" scope="col">Credit</th>
+                    </tr>
+                    </thead>
+                    <tbody class="table-group-divider">
+                    <% Product.categories.each do |category| %>
+                      <% if Rails.application.config.x.codes[category.first.to_sym] != nil %>
+                        <tr>
+                          <td><%= t(category.first).capitalize %>
+                          </td>
+                          <td><%= Rails.application.config.x.codes[category.first.to_sym] %>
+                          </td>
+                          <td class="text-end">
+                            <%= number_to_currency(@revenue_by_category[category[0]] || 0, unit: '€') %>
+                          </td>
+                        </tr>
+                      <% end %>
+                    <% end %>
+                    <tr>
+                      <th class="ps-4" scope="row">Totaal opbrengsten</th>
+                      <td></td>
+                      <td class="text-end">
+                        <strong><%= number_to_currency(@revenue_total, unit: '€') %>
+                        </strong>
+                      </td>
+                    </tr>
+                    </tbody>
+                  </table>
+                </div>
+                <div class="col-12 col-md-5">
+                  <table class="table table-sm">
+                    <thead>
+                    <tr>
+                      <th scope="col">Balans</th>
+                      <th scope="col">Code</th>
+                      <th class="text-end" scope="col">Debit</th>
+                      <th class="text-end" scope="col">Credit</th>
+                    </tr>
+                    </thead>
+                    <tbody class="table-group-divider">
+                    <tr>
+                      <td>Inleg Zatladder Inlegsysteem</td>
+                      <td><%= Rails.application.config.x.codes[:credit_mutation] %></td>
+                      <td></td>
+                      <td class="text-end">
+                        <%= number_to_currency(@credit_mutations_total, unit: '€') %>
+                      </td>
+                    </tr>
+                    <tr>
+                      <td>Contante bestellingen</td>
+                      <td></td>
+                      <td></td>
+                      <td class="text-end"><%= number_to_currency(@revenue_with_cash, unit: '€') %></td>
+                    </tr>
+                    <tr>
+                      <td title="Contante inleg plus contante betalingen">
+                        <strong>
+                          Totaal kas
+                        </strong>
+                      </td>
+                      <td><%= Rails.application.config.x.codes[:cash] %></td>
+                      <td class="text-end"><%= number_to_currency(@cash_total, unit: '€') %></td>
+                      <td></td>
+                    </tr>
+                    <tr>
+                      <td>Omzet Pin</td>
+                      <td><%= Rails.application.config.x.codes[:pin] %></td>
+                      <td class="text-end"><%= number_to_currency(@revenue_with_pin, unit: '€') %></td>
+                      <td></td>
+                    </tr>
+                    <tr>
+                      <td>Omzet Zatladder Inlegsysteem</td>
+                      <td><%= Rails.application.config.x.codes[:credit_mutation] %></td>
+                      <td class="text-end"><%= number_to_currency(@revenue_with_credit, unit: '€') %></td>
+                      <td></td>
+                    </tr>
+                    </tbody>
+                  </table>
+                </div>
+              <% end %></div>
+          </div>
+        <% end %>
+        <% if policy(Activity).credit_mutations? %>
+          <div aria-labelledby="credit_mutations-tab" class="tab-pane" id="credit_mutations" role="tabpanel">
+            <div class="table-responsive">
+              <table class="table table-striped">
+                <% if @credit_mutations.empty? %>
                   <tr>
                     <td class="text-center" colspan="4">
                       <p class="my-1">
                         <em>
-                          Er zijn nog geen bestellingen en er is nog niet ingelegd
+                          Er zijn nog geen correcties en er is nog niet ingelegd
                         </em>
                       </p>
                     </td>
                   </tr>
-                  </tbody>
-                </table>
-              </div>
-            <% else %>
-              <div class="col-12 col-md-6">
-                <table class="table table-sm">
+                <% else %>
                   <thead>
                   <tr>
-                    <th scope="col">Resultaat</th>
-                    <th scope="col">Code</th>
-                    <th class="text-end" scope="col">Credit</th>
+                    <th scope="col">#</th>
+                    <th scope="col">Tijd</th>
+                    <th scope="col">Gebruiker</th>
+                    <th scope="col">Bedrag</th>
                   </tr>
                   </thead>
                   <tbody class="table-group-divider">
-                  <% Product.categories.each do |category| %>
-                    <% if Rails.application.config.x.codes[category.first.to_sym] != nil %>
-                      <tr>
-                        <td><%= t(category.first).capitalize %>
-                        </td>
-                        <td><%= Rails.application.config.x.codes[category.first.to_sym] %>
-                        </td>
-                        <td class="text-end">
-                          <%= number_to_currency(@revenue_by_category[category[0]] || 0, unit: '€') %>
-                        </td>
-                      </tr>
-                    <% end %>
+                  <% @credit_mutations.each do |mutation| %>
+                    <tr>
+                      <th scope="row"><%= mutation.id %></th>
+                      <td><%= l mutation.created_at, format: :time_only %></td>
+                      <td>
+                        <% if policy(User).show? %>
+                        <%= link_to mutation.user.name, mutation.user %>
+                        <% else %>
+                          <a><%= mutation.user.name %><a>
+                        <% end %>
+                      </td>
+                      <td><%= number_to_currency(mutation.amount, unit: '€') %></td>
+                    </tr>
                   <% end %>
-                  <tr>
-                    <th class="ps-4" scope="row">Totaal opbrengsten</th>
-                    <td></td>
-                    <td class="text-end">
-                      <strong><%= number_to_currency(@revenue_total, unit: '€') %>
-                      </strong>
-                    </td>
-                  </tr>
                   </tbody>
-                </table>
-              </div>
-              <div class="col-12 col-md-5">
-                <table class="table table-sm">
-                  <thead>
-                  <tr>
-                    <th scope="col">Balans</th>
-                    <th scope="col">Code</th>
-                    <th class="text-end" scope="col">Debit</th>
-                    <th class="text-end" scope="col">Credit</th>
-                  </tr>
-                  </thead>
-                  <tbody class="table-group-divider">
-                  <tr>
-                    <td>Inleg Zatladder Inlegsysteem</td>
-                    <td><%= Rails.application.config.x.codes[:credit_mutation] %></td>
-                    <td></td>
-                    <td class="text-end">
-                      <%= number_to_currency(@credit_mutations_total, unit: '€') %>
-                    </td>
-                  </tr>
-                  <tr>
-                    <td>Contante bestellingen</td>
-                    <td></td>
-                    <td></td>
-                    <td class="text-end"><%= number_to_currency(@revenue_with_cash, unit: '€') %></td>
-                  </tr>
-                  <tr>
-                    <td title="Contante inleg plus contante betalingen">
-                      <strong>
-                        Totaal kas
-                      </strong>
-                    </td>
-                    <td><%= Rails.application.config.x.codes[:cash] %></td>
-                    <td class="text-end"><%= number_to_currency(@cash_total, unit: '€') %></td>
-                    <td></td>
-                  </tr>
-                  <tr>
-                    <td>Omzet Pin</td>
-                    <td><%= Rails.application.config.x.codes[:pin] %></td>
-                    <td class="text-end"><%= number_to_currency(@revenue_with_pin, unit: '€') %></td>
-                    <td></td>
-                  </tr>
-                  <tr>
-                    <td>Omzet Zatladder Inlegsysteem</td>
-                    <td><%= Rails.application.config.x.codes[:credit_mutation] %></td>
-                    <td class="text-end"><%= number_to_currency(@revenue_with_credit, unit: '€') %></td>
-                    <td></td>
-                  </tr>
-                  </tbody>
-                </table>
-              </div>
-            <% end %></div>
-        </div>
-        <div aria-labelledby="credit_mutations-tab" class="tab-pane" id="credit_mutations" role="tabpanel">
-          <div class="table-responsive">
-            <table class="table table-striped">
-              <% if @credit_mutations.empty? %>
-                <tr>
-                  <td class="text-center" colspan="4">
-                    <p class="my-1">
-                      <em>
-                        Er zijn nog geen correcties en er is nog niet ingelegd
-                      </em>
-                    </p>
-                  </td>
-                </tr>
-              <% else %>
-                <thead>
-                <tr>
-                  <th scope="col">#</th>
-                  <th scope="col">Tijd</th>
-                  <th scope="col">Gebruiker</th>
-                  <th scope="col">Bedrag</th>
-                </tr>
-                </thead>
-                <tbody class="table-group-divider">
-                <% @credit_mutations.each do |mutation| %>
-                  <tr>
-                    <th scope="row"><%= mutation.id %></th>
-                    <td><%= l mutation.created_at, format: :time_only %></td>
-                    <td><%= link_to mutation.user.name, mutation.user %></td>
-                    <td><%= number_to_currency(mutation.amount, unit: '€') %></td>
-                  </tr>
                 <% end %>
-                </tbody>
-              <% end %>
-            </table>
+              </table>
+            </div>
           </div>
-        </div>
-        <% if current_user.treasurer? %>
+        <% end %>
+        <% if policy(Activity).orders? %>
           <div aria-labelledby="orders-tab" class="tab-pane" id="orders" role="tabpanel">
             <div class="table-responsive">
               <table class="table table-striped">
@@ -301,7 +323,7 @@
                         <% order.order_rows.each_with_index do |order_row, i| %>
                           <%= order_row.product.name %>
                           <% if order_row.product_count > 1 %>
-                            ( <%= order_row.product_count %> x)
+                            (<u><%= order_row.product_count %>x</u>)
                           <% end %>
                           <% if i < order.order_rows.size - 1 %>
                             ,
@@ -316,13 +338,15 @@
             </div>
           </div>
         <% end %>
-        <div aria-labelledby="product_totals-tab" class="tab-pane" id="product_totals" role="tabpanel">
-          <div class="row">
-            <div class="col-6 mx-auto">
-              <product-totals activity="<%= @activity.id %>"></product-totals>
+        <% if policy(Activity).product_totals? %>
+          <div aria-labelledby="product_totals-tab" class="tab-pane" id="product_totals" role="tabpanel">
+            <div class="row">
+              <div class="col-6 mx-auto">
+                <product-totals activity="<%= @activity.id %>"></product-totals>
+              </div>
             </div>
           </div>
-        </div>
+        <% end %>
       </div>
     </div>
   </div>
diff --git a/app/views/index/index.html.erb b/app/views/index/index.html.erb
index 45247a974..0c14c6fb6 100644
--- a/app/views/index/index.html.erb
+++ b/app/views/index/index.html.erb
@@ -3,7 +3,7 @@
 
 <div class="container py-sm-3">
   <div class="row">
-    <% if current_user&.treasurer? || current_user&.main_bartender? %>
+    <% if current_user&.treasurer? || current_user&.renting_manager? || current_user&.main_bartender? %>
       <div class="col-12 col-md-6 mb-2">
         <div class="card">
           <h5 class="card-header">Welkom,  <%= current_user.name %>
@@ -49,7 +49,7 @@
                   </li>
                 <% end %>
               </ol>
-              <% if @current_activities&.any? %>
+              <% if policy(Activity).order_screen? && @current_activities&.any? %>
                 <hr/>
                 <h4 class="card-title text-center">
                   Direct naar het streepscherm
diff --git a/app/views/invoices/_modal.html.erb b/app/views/invoices/_modal.html.erb
index 9b229b0dd..0f3e144e9 100644
--- a/app/views/invoices/_modal.html.erb
+++ b/app/views/invoices/_modal.html.erb
@@ -19,7 +19,7 @@
                 <input class="d-none" name="invoice[activity_id]" v-bind:value="selectedSuggestion.id"/>
 
                 <input @focus="openSuggestions" @input="openSuggestions" aria-haspopup="true" autocomplete="off"
-                       class="form-control" placeholder="Begin met typen..." required="true" type="text"
+                       class="form-control" placeholder="Zoek op specifieke gebruiker..." required="true" type="text"
                        v-bind:aria-expanded="dropdownOpened" v-model="query"/>
                 <div class="row g-0 w-100 position-relative">
                   <ul class="dropdown-menu" v-bind:class="{'show':dropdownOpened}">
diff --git a/app/views/invoices/index.html.erb b/app/views/invoices/index.html.erb
index 6d0ff1c2d..1cdd42f29 100644
--- a/app/views/invoices/index.html.erb
+++ b/app/views/invoices/index.html.erb
@@ -10,9 +10,11 @@
       <h1>
         Facturen
       </h1>
-      <button class="btn btn-sm btn-primary" data-bs-target="#new_invoice_modal" data-bs-toggle="modal" role="button">
-        Nieuwe factuur
-      </button>
+      <% if policy(Invoice).create? %>
+        <button class="btn btn-sm btn-primary" data-bs-target="#new_invoice_modal" data-bs-toggle="modal" role="button">
+          Nieuwe factuur
+        </button>
+      <% end %>
     </div>
     <div class="col-sm-12">
       <div class="table-responsive">
@@ -27,7 +29,9 @@
             <th scope="col">Naam</th>
             <th scope="col">Mailadres</th>
             <th scope="col">Status</th>
-            <th scope="col">Verstuur</th>
+            <% if policy(Invoice).send_invoice? %>
+              <th scope="col">Verstuur</th>
+            <% end %>
           </tr>
           </thead>
           <tbody class="table-group-divider">
@@ -40,7 +44,11 @@
                 <%= link_to invoice.human_id, invoice %>
               </td>
               <td>
-                <%= link_to invoice.user.name, invoice.user %>
+                <% if policy(invoice.user).show? %>
+                  <%= link_to invoice.user.name, invoice.user %>
+                <% else %>
+                  <%= invoice.user.name %>
+                <% end%>
               </td>
               <td>
                 <%= link_to invoice.activity.title, invoice.activity %>
@@ -57,13 +65,15 @@
               <td>
                 <%= t(invoice.status).humanize %>
               </td>
-              <td>
-                <% if invoice.pending? %>
-                  <%= simple_form_for invoice, wrapper: :horizontal_form, url: send_invoice_invoice_path(id: invoice.id), method: :post do |f| %>
-                    <%= f.button :submit, 'Factuur versturen', class: 'btn btn-primary' %>
+              <% if policy(Invoice).send_invoice? %>
+                <td>
+                  <% if invoice.pending? %>
+                    <%= simple_form_for invoice, wrapper: :horizontal_form, url: send_invoice_invoice_path(id: invoice.id), method: :post do |f| %>
+                      <%= f.button :submit, 'Factuur versturen', class: 'btn btn-primary' %>
+                    <% end %>
                   <% end %>
-                <% end %>
-              </td>
+                </td>
+              <% end %>
             </tr>
           <% end %>
           </tbody>
diff --git a/app/views/invoices/show.html.erb b/app/views/invoices/show.html.erb
index bfcd4daa1..e4f9d064a 100644
--- a/app/views/invoices/show.html.erb
+++ b/app/views/invoices/show.html.erb
@@ -63,7 +63,7 @@
         </tbody>
       </table>
 
-      <% unless @invoice.paid? %>
+      <% if policy(Invoice).send_invoice? && !@invoice.paid? %>
         <%= link_to pay_invoice_url @invoice.token do %>
           <button class="col-sm-3 offset-sm-9 btn btn-primary">Betalen</button>
         <% end %>
diff --git a/app/views/partials/_navigation_bar.html.erb b/app/views/partials/_navigation_bar.html.erb
index a70b5f94b..e4ebdf08f 100644
--- a/app/views/partials/_navigation_bar.html.erb
+++ b/app/views/partials/_navigation_bar.html.erb
@@ -13,14 +13,14 @@
             <%= fa_icon 'home', class: 'me-2', text: 'Home' %>
           <% end %>
         </li>
-        <% if current_user&.main_bartender? || current_user&.treasurer? %>
+        <% if policy(Activity).index? %>
           <li class="nav-item">
             <%= nav_link activities_path, class: 'nav-link' do %>
               <%= fa_icon 'calendar', class: 'me-2', text: 'Activiteiten' %>
             <% end %>
           </li>
         <% end %>
-        <% if current_user&.treasurer? %>
+        <% if current_user&.treasurer? || current_user&.renting_manager? %>
           <li class="nav-item">
             <%= nav_link users_path, class: 'nav-link' do %>
               <%= fa_icon 'users', class: 'me-2', text: 'Gebruikers' %>
@@ -31,28 +31,36 @@
               <%= fa_icon 'beer', class: 'me-2', text: 'Prijslijsten' %>
             <% end %>
           </li>
+        <% end %>
+        <% if current_user&.treasurer? %>
           <li class="nav-item">
             <%= nav_link credit_mutations_path, class: 'nav-link' do %>
               <%= fa_icon 'money', class: 'me-2', text: 'Inleg en saldocorrecties' %>
             <% end %>
           </li>
+        <% end %>
+        <% if policy(:zatladder).index? %>
           <li class="nav-item">
             <%= nav_link zatladder_index_path, class: 'nav-link' do %>
               <%= fa_icon 'list', class: 'me-2', text: 'Zatladder' %>
             <% end %>
           </li>
+        <% end %>
+        <% if policy(Invoice).index? %>
           <li class="nav-item">
             <%= nav_link invoices_path, class: 'nav-link' do %>
               <%= fa_icon 'shopping-cart', class: 'me-2', text: 'Facturen' %>
             <% end %>
           </li>
-          <% if policy(Payment).index? %>
-            <li class="nav-item">
-              <%= nav_link payments_path, class: 'nav-link' do %>
-                <%= fa_icon 'credit-card', class: 'me-2', text: 'Betalingen' %>
-              <% end %>
-            </li>
-          <% end %>
+        <% end %>
+        <% if policy(Payment).index? %>
+          <li class="nav-item">
+            <%= nav_link payments_path, class: 'nav-link' do %>
+              <%= fa_icon 'credit-card', class: 'me-2', text: 'Betalingen' %>
+            <% end %>
+          </li>
+        <% end %>
+        <% if policy(:finance_overview).index? %>
           <li class="nav-item">
             <%= nav_link finance_overview_index_path, class: 'nav-link' do %>
               <%= fa_icon 'money', class: 'me-2', text: 'Financien' %>
diff --git a/app/views/price_lists/index.html.erb b/app/views/price_lists/index.html.erb
index ca0f0c25e..2998d0dba 100644
--- a/app/views/price_lists/index.html.erb
+++ b/app/views/price_lists/index.html.erb
@@ -14,19 +14,23 @@
         <span class="my-1">
           Hier worden alle prijslijsten en alle producten getoond.
         </span>
-        <button class="btn btn-sm btn-primary" data-bs-target="#editPriceListModal" data-bs-toggle="modal" role="button">
-          <%= fa_icon 'plus', class: 'me-1' %>
-          Nieuwe prijslijst
-        </button>
-      </div>
-      <div class="form-check">
-        <input class="form-check-input" type="checkbox" id="show-archived-check" v-model="showArchived">
-        <label class="form-check-label" for="show-archived-check">
-          Laat gearchieveerde prijslijsten zien 
-        </label>
+        <% if policy(PriceList).create? %>
+          <button class="btn btn-sm btn-primary" data-bs-target="#editPriceListModal" data-bs-toggle="modal" role="button">
+            <%= fa_icon 'plus', class: 'me-1' %>
+            Nieuwe prijslijst
+          </button>
+        <% end %>
       </div>
+      <% if policy(PriceList).archive? %>
+        <div class="form-check">
+          <input class="form-check-input" type="checkbox" id="show-archived-check" v-model="showArchived">
+          <label class="form-check-label" for="show-archived-check">
+            Laat gearchieveerde prijslijsten zien 
+          </label>
+        </div>
+      <% end %>
       
-      <table id='price-lists-table' class='price-lists-table table table-striped overflow-scroll mw-100 mx-auto d-block'>
+      <table id='price-lists-table' class='price-lists-table table table-striped overflow-scroll mw-100 mx-auto d-block pe-2'>
         <thead class="table-header-rotated products">
         <tr>
           <th class="products-id" scope="col">ID</th>
@@ -39,7 +43,7 @@
               </span>
             </div>
           </th>
-          <th class="products-actions" v-if="filteredPriceLists.length > 0">
+          <th class="products-actions" v-if="<%= policy(Product).update? %> && filteredPriceLists.length > 0">
           </th>
         </tr>
         </thead>
@@ -91,7 +95,7 @@
                 {{ productPriceToCurrency(findPrice(product, priceList)) }}
               </span>
             </td>
-            <td class="products-new-edit-button" v-if="filteredPriceLists.length > 0">
+            <td class="products-new-edit-button" v-if="<%= policy(Product).update? %> && filteredPriceLists.length > 0">
               <button class="btn btn-sm btn-outline-secondary" v-on:click="editProduct(product)">
                 <%= fa_icon 'pencil' %>
               </button>
@@ -101,19 +105,22 @@
         <tr>
           <td colspan="3">
             <div class="d-grid">
-              <button class="btn btn-secondary btn-sm products-button-new" v-on:click.prevent="newProduct">
-                Voeg een nieuw product toe
-                <%= fa_icon 'plus-square', class: 'ps-2' %>
-              </button>
+              <% if policy(Product).create? %>
+                <button class="btn btn-secondary btn-sm products-button-new" v-on:click.prevent="newProduct">
+                  Voeg een nieuw product toe
+                  <%= fa_icon 'plus-square', class: 'ps-2' %>
+                </button>
+              <% end %>
             </div>
           </td>
           <td class="products-archive-button center-text" v-for="priceList in filteredPriceLists">
-          <button class="btn btn-sm btn-outline-secondary" v-if="priceList.archived_at" v-on:click="unarchivePriceList(priceList)">
-            <%= fa_icon 'repeat' %>
-          </button>
-          <button class="btn btn-sm btn-outline-secondary" v-else="" v-on:click="archivePriceList(priceList)">
-            <%= fa_icon 'archive' %>
-          </button>
+            <button class="btn btn-sm btn-outline-secondary" v-if="<%= policy(PriceList).unarchive? %> && priceList.archived_at" v-on:click="unarchivePriceList(priceList)">
+              <%= fa_icon 'repeat' %>
+            </button>
+            <button class="btn btn-sm btn-outline-secondary" v-else-if="<%= policy(PriceList).archive? %>" v-on:click="archivePriceList(priceList)">
+              <%= fa_icon 'archive' %>
+            </button>
+            <div></div>
           </td>
         </tr>
         </tbody>
diff --git a/app/views/users/index.html.erb b/app/views/users/index.html.erb
index d43f11001..9617f796c 100644
--- a/app/views/users/index.html.erb
+++ b/app/views/users/index.html.erb
@@ -9,23 +9,27 @@
   <%= content_tag :div, id: 'users-index', data: {manual_users: @manual_users_json, amber_users: @amber_users_json, inactive_users: @inactive_users_json} do %>
     <div class="d-flex justify-content-between align-items-center">
       <h3>Handmatig aangemaakte gebruikers</h3>
-      <button class="btn btn-sm btn-primary" data-bs-target="#edit_user_modal" data-bs-toggle="modal" role="button">
-        <%= fa_icon 'plus' %>
-        <span class="d-none d-md-inline ms-1">
-          Nieuwe gebruiker
-        </span>
-      </button>
+      <% if policy(User).create? %>
+        <button class="btn btn-sm btn-primary" data-bs-target="#edit_user_modal" data-bs-toggle="modal" role="button">
+          <%= fa_icon 'plus' %>
+          <span class="d-none d-md-inline ms-1">
+            Nieuwe gebruiker
+          </span>
+        </button>
+      <% end %>
     </div>
     <users-table :users="manual_users"></users-table>
 
     <div class="d-flex justify-content-between align-items-center mt-5">
       <h3><%= Rails.application.config.x.site_association %> gebruikers</h3>
-      <span>
-        <%= link_to refresh_user_list_users_path, class: 'btn btn-primary btn-sm me-1' do %>
-          <%= fa_icon 'refresh' %>
-          <span class="d-none d-md-inline ms-1">Synchroniseer gebruikers</span>
-        <% end %>
-      </span>
+      <% if policy(User).refresh_user_list? %>
+        <span>
+          <%= link_to refresh_user_list_users_path, class: 'btn btn-primary btn-sm me-1' do %>
+            <%= fa_icon 'refresh' %>
+            <span class="d-none d-md-inline ms-1">Synchroniseer gebruikers</span>
+          <% end %>
+        </span>
+      <% end %>
     </div>
     <users-table :users="amber_users"></users-table>
 
diff --git a/db/seeds.rb b/db/seeds.rb
index a307eeab8..3043c9a22 100644
--- a/db/seeds.rb
+++ b/db/seeds.rb
@@ -42,7 +42,7 @@
 FactoryBot.create_list(:invoice, 3, :with_rows)
 
 p 'Seeding roles...'
-Role.create(role_type: :treasurer, group_uid: 3)
-Role.create(role_type: :main_bartender, group_uid: 3)
-Role.create(role_type: :main_bartender, group_uid: 2)
+Role.create(role_type: :treasurer, group_uid: 4)
+Role.create(role_type: :renting_manager, group_uid: 5)
+Role.create(role_type: :main_bartender, group_uid: 6)
 # rubocop:enable Rails/Output
diff --git a/spec/controllers/activities_controller/create_invoices_spec.rb b/spec/controllers/activities_controller/create_invoices_spec.rb
index 5bc9c24b7..95ee573cb 100644
--- a/spec/controllers/activities_controller/create_invoices_spec.rb
+++ b/spec/controllers/activities_controller/create_invoices_spec.rb
@@ -21,6 +21,13 @@
       expect(request.status).to eq 403
     end
 
+    it 'unauthenticated when as renting-manager' do
+      sign_in create(:user, :renting_manager)
+      request
+
+      expect(request.status).to eq 403
+    end
+
     context 'when as treasurer' do
       let(:user) { create(:user, :treasurer) }
 
diff --git a/spec/controllers/activities_controller/create_spec.rb b/spec/controllers/activities_controller/create_spec.rb
index b138e9701..91c31f2c3 100644
--- a/spec/controllers/activities_controller/create_spec.rb
+++ b/spec/controllers/activities_controller/create_spec.rb
@@ -9,11 +9,26 @@
       post :create, params: { activity: activity.attributes }
     end
 
-    it 'creates a new activity' do
+    it 'treasurer creates a new activity' do
       sign_in create(:user, :treasurer)
       expect { request }.to(change(Activity, :count).by(1))
     end
 
+    it 'renting-manager creates a new activity' do
+      sign_in create(:user, :renting_manager)
+      expect { request }.to(change(Activity, :count).by(1))
+    end
+
+    it 'main-bartender creates a new activity' do
+      sign_in create(:user, :main_bartender)
+      expect { request }.to(change(Activity, :count).by(1))
+    end
+
+    it 'user cannot create a new activity' do
+      sign_in create(:user)
+      expect { request }.not_to change(Activity, :count)
+    end
+
     it 'redirects after create' do
       sign_in create(:user, :treasurer)
       request
diff --git a/spec/controllers/activities_controller/destroy_spec.rb b/spec/controllers/activities_controller/destroy_spec.rb
index 43b89c29f..7333ef35c 100644
--- a/spec/controllers/activities_controller/destroy_spec.rb
+++ b/spec/controllers/activities_controller/destroy_spec.rb
@@ -23,7 +23,7 @@
       it { expect(request.status).to eq 403 }
     end
 
-    describe 'when as main bartender' do
+    describe 'when as main-bartender' do
       let(:user) { create(:user, :main_bartender) }
 
       context 'when with empty activity' do
@@ -39,6 +39,22 @@
       end
     end
 
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      context 'when with empty activity' do
+        it { expect(request.status).to eq 302 }
+        it { expect(Activity.count).to eq 0 }
+      end
+
+      context 'when with non-empty activity' do
+        let(:additional_records) { create(:order, activity: activity) }
+
+        it { expect(request.status).to eq 302 }
+        it { expect(Activity.count).to eq 1 }
+      end
+    end
+
     describe 'when as treasurer' do
       let(:user) { create(:user, :treasurer) }
 
diff --git a/spec/controllers/activities_controller/index_spec.rb b/spec/controllers/activities_controller/index_spec.rb
index a0222d81d..ca837556f 100644
--- a/spec/controllers/activities_controller/index_spec.rb
+++ b/spec/controllers/activities_controller/index_spec.rb
@@ -32,6 +32,17 @@
       end
     end
 
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it do
+        expect(request.status).to eq 200
+        expect(assigns(:activities).size).to eq 3
+        expect(assigns(:price_lists_json)).to eq PriceList.all.to_json(only: %i[id name])
+        expect(assigns(:activity)).to be_an_instance_of(Activity)
+      end
+    end
+
     describe 'when as treasurer' do
       let(:user) { create(:user, :treasurer) }
 
diff --git a/spec/controllers/activities_controller/lock_spec.rb b/spec/controllers/activities_controller/lock_spec.rb
index 416f14bd9..e12c328db 100644
--- a/spec/controllers/activities_controller/lock_spec.rb
+++ b/spec/controllers/activities_controller/lock_spec.rb
@@ -21,6 +21,13 @@
       expect(request.status).to eq 403
     end
 
+    it 'unauthenticated when as renting-manager' do
+      sign_in create(:user, :renting_manager)
+      request
+
+      expect(request.status).to eq 403
+    end
+
     context 'when as treasurer' do
       let(:user) { create(:user, :treasurer) }
 
diff --git a/spec/controllers/activities_controller/product_totals_spec.rb b/spec/controllers/activities_controller/product_totals_spec.rb
index 57d0cfb1c..1b5838c3a 100644
--- a/spec/controllers/activities_controller/product_totals_spec.rb
+++ b/spec/controllers/activities_controller/product_totals_spec.rb
@@ -33,6 +33,76 @@
         expect(json.find { |item| item['name'] == products.first[:name] }['amount']).to eq 6
         expect(json.find { |item| item['name'] == products.last[:name] }['amount']).to eq 3
       end
+
+      context 'when filtering for user' do
+        let(:order) { create(:order, activity: activity, user: user) }
+        let(:params) { { id: activity.id, user: user.id } }
+
+        it do
+          expect(json.find { |item| item['name'] == products.first[:name] }['amount']).to eq 2
+          expect(json.find { |item| item['name'] == products.last[:name] }['amount']).to eq 3
+        end
+      end
+
+      context 'when filtering for cash' do
+        let(:order) { create(:order, activity: activity, paid_with_cash: true) }
+        let(:params) { { id: activity.id, paid_with_cash: true } }
+
+        it do
+          expect(json.find { |item| item['name'] == products.first[:name] }['amount']).to eq 2
+          expect(json.find { |item| item['name'] == products.last[:name] }['amount']).to eq 3
+        end
+      end
+
+      context 'when filtering for pin' do
+        let(:order) { create(:order, activity: activity, paid_with_pin: true) }
+        let(:params) { { id: activity.id, paid_with_pin: true } }
+
+        it do
+          expect(json.find { |item| item['name'] == products.first[:name] }['amount']).to eq 2
+          expect(json.find { |item| item['name'] == products.last[:name] }['amount']).to eq 3
+        end
+      end
+    end
+
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it do
+        expect(request.status).to eq 200
+        expect(json.find { |item| item['name'] == products.first[:name] }['amount']).to eq 6
+        expect(json.find { |item| item['name'] == products.last[:name] }['amount']).to eq 3
+      end
+
+      context 'when filtering for user' do
+        let(:order) { create(:order, activity: activity, user: user) }
+        let(:params) { { id: activity.id, user: user.id } }
+
+        it do
+          expect(json.find { |item| item['name'] == products.first[:name] }['amount']).to eq 2
+          expect(json.find { |item| item['name'] == products.last[:name] }['amount']).to eq 3
+        end
+      end
+
+      context 'when filtering for cash' do
+        let(:order) { create(:order, activity: activity, paid_with_cash: true) }
+        let(:params) { { id: activity.id, paid_with_cash: true } }
+
+        it do
+          expect(json.find { |item| item['name'] == products.first[:name] }['amount']).to eq 2
+          expect(json.find { |item| item['name'] == products.last[:name] }['amount']).to eq 3
+        end
+      end
+
+      context 'when filtering for pin' do
+        let(:order) { create(:order, activity: activity, paid_with_pin: true) }
+        let(:params) { { id: activity.id, paid_with_pin: true } }
+
+        it do
+          expect(json.find { |item| item['name'] == products.first[:name] }['amount']).to eq 2
+          expect(json.find { |item| item['name'] == products.last[:name] }['amount']).to eq 3
+        end
+      end
     end
 
     describe 'when as treasurer' do
diff --git a/spec/controllers/activities_controller/update_spec.rb b/spec/controllers/activities_controller/update_spec.rb
index cb0472769..f9bf95e37 100644
--- a/spec/controllers/activities_controller/update_spec.rb
+++ b/spec/controllers/activities_controller/update_spec.rb
@@ -29,6 +29,13 @@
       it { expect(activity.title).to eq 'New Title' }
     end
 
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it { expect(request.status).to eq 302 }
+      it { expect(activity.title).to eq 'New Title' }
+    end
+
     describe 'when as treasurer' do
       let(:user) { create(:user, :treasurer) }
 
diff --git a/spec/controllers/credit_mutations_controller/create_spec.rb b/spec/controllers/credit_mutations_controller/create_spec.rb
new file mode 100644
index 000000000..df987739f
--- /dev/null
+++ b/spec/controllers/credit_mutations_controller/create_spec.rb
@@ -0,0 +1,67 @@
+require 'rails_helper'
+
+describe CreditMutationsController, type: :controller do
+  describe 'POST create' do
+    let(:user) { create(:user) }
+    let(:credit_mutation) do
+      build(:credit_mutation, user: user)
+    end
+    let(:credit_mutation_with_activity) do
+      build(:credit_mutation, activity: create(:activity), user: user)
+    end
+    let(:request1) do
+      post :create, params: { credit_mutation: credit_mutation.attributes, format: :json }
+    end
+    let(:request2) do
+      post :create, params: { credit_mutation: credit_mutation_with_activity.attributes, format: :json }
+    end
+
+    context 'when as treasurer' do
+      it 'creates a new credit_mutation' do
+        sign_in create(:user, :treasurer)
+        expect { request1 }.to(change(CreditMutation, :count).by(1))
+      end
+
+      it 'creates a new credit_mutation linked to an activity' do
+        sign_in create(:user, :treasurer)
+        expect { request2 }.to(change(CreditMutation, :count).by(1))
+      end
+    end
+
+    context 'when as renting-manager' do
+      it 'creates a new credit_mutation' do
+        sign_in create(:user, :renting_manager)
+        expect { request1 }.not_to change(CreditMutation, :count)
+      end
+
+      it 'creates a new credit_mutation linked to an activity' do
+        sign_in create(:user, :renting_manager)
+        expect { request2 }.not_to change(CreditMutation, :count)
+      end
+    end
+
+    context 'when as main-bartender' do
+      it 'creates a new credit_mutation' do
+        sign_in create(:user, :main_bartender)
+        expect { request1 }.not_to change(CreditMutation, :count)
+      end
+
+      it 'creates a new credit_mutation linked to an activity' do
+        sign_in create(:user, :main_bartender)
+        expect { request2 }.to(change(CreditMutation, :count).by(1))
+      end
+    end
+
+    context 'when as user' do
+      it 'creates a new credit_mutation' do
+        sign_in create(:user)
+        expect { request1 }.not_to change(CreditMutation, :count)
+      end
+
+      it 'creates a new credit_mutation linked to an activity' do
+        sign_in create(:user)
+        expect { request2 }.not_to change(CreditMutation, :count)
+      end
+    end
+  end
+end
diff --git a/spec/controllers/credit_mutations_controller/index_spec.rb b/spec/controllers/credit_mutations_controller/index_spec.rb
new file mode 100644
index 000000000..088cedf93
--- /dev/null
+++ b/spec/controllers/credit_mutations_controller/index_spec.rb
@@ -0,0 +1,50 @@
+require 'rails_helper'
+
+describe CreditMutationsController, type: :controller do
+  describe 'GET index' do
+    let(:credit_mutation) { create(:credit_mutation, user: create(:user)) }
+    let(:credit_mutation_with_activity) { create(:credit_mutation, activity: create(:activity), user: create(:user)) }
+    let(:request) { get :index }
+
+    before do
+      credit_mutation
+      credit_mutation_with_activity
+      sign_in user
+      request
+    end
+
+    describe 'when as treasurer' do
+      let(:user) { create(:user, :treasurer) }
+
+      it 'shows credit_mutations' do
+        expect(request.status).to eq 200
+        expect(assigns(:credit_mutations).size).to eq 2
+      end
+    end
+
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it 'shows credit_mutations' do
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
+    describe 'when as main-bartender' do
+      let(:user) { create(:user, :main_bartender) }
+
+      it 'shows credit_mutations' do
+        expect(request.status).to eq 200
+        expect(assigns(:credit_mutations).size).to eq 1
+      end
+    end
+
+    describe 'when as user' do
+      let(:user) { create(:user) }
+
+      it 'shows credit_mutations' do
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+  end
+end
diff --git a/spec/controllers/invoices_controller/create_spec.rb b/spec/controllers/invoices_controller/create_spec.rb
new file mode 100644
index 000000000..892eec3f2
--- /dev/null
+++ b/spec/controllers/invoices_controller/create_spec.rb
@@ -0,0 +1,38 @@
+require 'rails_helper'
+
+describe InvoicesController, type: :controller do
+  describe 'POST create' do
+    let(:invoice) do
+      build(:invoice, user: create(:user), activity: create(:activity, :locked))
+    end
+    let(:request) do
+      post :create, params: { invoice: invoice.attributes }
+    end
+
+    it 'treasurer creates a new invoice' do
+      sign_in create(:user, :treasurer)
+      expect { request }.to(change(Invoice, :count).by(1))
+    end
+
+    it 'renting-manager cannot create a new invoice' do
+      sign_in create(:user, :renting_manager)
+      expect { request }.not_to change(Invoice, :count)
+    end
+
+    it 'main-bartender cannot create a new invoice' do
+      sign_in create(:user, :main_bartender)
+      expect { request }.not_to change(Invoice, :count)
+    end
+
+    it 'user cannot create a new invoice' do
+      sign_in create(:user)
+      expect { request }.not_to change(Invoice, :count)
+    end
+
+    it 'redirects after create' do
+      sign_in create(:user, :treasurer)
+      request
+      expect(response).to be_redirect
+    end
+  end
+end
diff --git a/spec/controllers/invoices_controller/index_spec.rb b/spec/controllers/invoices_controller/index_spec.rb
index afe2d4101..ab7fad4e9 100644
--- a/spec/controllers/invoices_controller/index_spec.rb
+++ b/spec/controllers/invoices_controller/index_spec.rb
@@ -17,6 +17,24 @@
       end
     end
 
+    context 'when as renting-manager' do
+      it 'shows invoices' do
+        sign_in create(:user, :renting_manager)
+        get :index
+
+        expect(assigns(:invoices).size).to eq invoices.size
+      end
+    end
+
+    context 'when as main-bartender' do
+      it 'forbids' do
+        sign_in create(:user, :main_bartender)
+        get :index
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
     context 'when as user' do
       it 'forbids' do
         sign_in create(:user)
diff --git a/spec/controllers/invoices_controller/show_spec.rb b/spec/controllers/invoices_controller/show_spec.rb
index e6cfc6453..a18763cd2 100644
--- a/spec/controllers/invoices_controller/show_spec.rb
+++ b/spec/controllers/invoices_controller/show_spec.rb
@@ -17,6 +17,24 @@
       end
     end
 
+    context 'when as renting-manager' do
+      it 'shows invoice' do
+        sign_in create(:user, :renting_manager)
+        get :show, params: { id: invoice.id }
+
+        expect(response).to have_http_status(:ok)
+      end
+    end
+
+    context 'when as main-bartender' do
+      it 'forbids' do
+        sign_in create(:user, :main_bartender)
+        get :show, params: { id: invoice.id }
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
     context 'when as user' do
       it 'forbids' do
         sign_in create(:user)
diff --git a/spec/controllers/orders_controller/create_spec.rb b/spec/controllers/orders_controller/create_spec.rb
new file mode 100644
index 000000000..d863db985
--- /dev/null
+++ b/spec/controllers/orders_controller/create_spec.rb
@@ -0,0 +1,74 @@
+require 'rails_helper'
+
+describe OrdersController, type: :controller do
+  describe 'POST create' do
+    let(:activity) { create(:activity) }
+    let(:locked_activity) { create(:activity) }
+    let(:order) do
+      build(:order, activity: activity, user: create(:user))
+    end
+    let(:order_on_locked_activity) do
+      build(:order, activity: locked_activity, user: create(:user))
+    end
+    let(:request) do
+      post :create, params: { order: order.attributes }
+    end
+    let(:request_on_locked_activity) do
+      post :create, params: { order: order_on_locked_activity.attributes }
+    end
+
+    before do
+      locked_activity.update(locked_by: create(:user))
+
+      sign_in user
+    end
+
+    describe 'when as treasurer' do
+      let(:user) { create(:user, :treasurer) }
+
+      it 'when with order on activity' do
+        expect { request }.to(change(Order, :count).by(1))
+      end
+
+      it 'when with order on locked activty' do
+        expect { request_on_locked_activity }.not_to change(Order, :count)
+      end
+    end
+
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it 'when with order on activity' do
+        expect { request }.to(change(Order, :count).by(1))
+      end
+
+      it 'when with order on locked activty' do
+        expect { request_on_locked_activity }.not_to change(Order, :count)
+      end
+    end
+
+    describe 'when as main-bartender' do
+      let(:user) { create(:user, :main_bartender) }
+
+      it 'when with order on activity' do
+        expect { request }.to(change(Order, :count).by(1))
+      end
+
+      it 'when with order on locked activty' do
+        expect { request_on_locked_activity }.not_to change(Order, :count)
+      end
+    end
+
+    describe 'when as user' do
+      let(:user) { create(:user) }
+
+      it 'when with order on activity' do
+        expect { request }.not_to change(Order, :count)
+      end
+
+      it 'when with order on locked activty' do
+        expect { request_on_locked_activity }.not_to change(Order, :count)
+      end
+    end
+  end
+end
diff --git a/spec/controllers/orders_controller/destroy_spec.rb b/spec/controllers/orders_controller/destroy_spec.rb
new file mode 100644
index 000000000..6a5ef5beb
--- /dev/null
+++ b/spec/controllers/orders_controller/destroy_spec.rb
@@ -0,0 +1,101 @@
+require 'rails_helper'
+
+describe OrdersController, type: :controller do
+  describe 'DELETE destroy' do
+    let(:activity) { create(:activity) }
+    let(:locked_activity) { create(:activity) }
+    let(:order) do
+      create(:order, activity: activity, user: create(:user))
+    end
+    let(:order_on_locked_activity) do
+      create(:order, activity: locked_activity, user: create(:user))
+    end
+    let(:products) { activity.price_list.products.sample(2) }
+    let(:request) do
+      delete :destroy, params: { id: order.id }
+    end
+    let(:request_on_locked_activity) do
+      delete :destroy, params: { id: order_on_locked_activity.id }
+    end
+
+    before do
+      create(:order_row, order: order, product_count: 2, product: activity.price_list.products.first)
+      create(:order_row, order: order_on_locked_activity, product_count: 2, product: locked_activity.price_list.products.first)
+      locked_activity.update(locked_by: create(:user))
+
+      sign_in user
+    end
+
+    describe 'when without permission' do
+      let(:user) { create(:user) }
+
+      it 'when with order on activity' do
+        request
+        expect(request.status).to eq 403
+        expect(Order.count).to eq 2
+        expect(Order.first.order_rows.first.product_count).to eq 2
+      end
+
+      it 'when with order on locked activty' do
+        request_on_locked_activity
+        expect(request_on_locked_activity.status).to eq 403
+        expect(Order.count).to eq 2
+        expect(Order.first.order_rows.last.product_count).to eq 2
+      end
+    end
+
+    describe 'when as main-bartender' do
+      let(:user) { create(:user, :main_bartender) }
+
+      it 'when with order on activity' do
+        request
+        expect(request.status).to eq 200
+        expect(Order.count).to eq 2
+        expect(Order.first.order_rows.first.product_count).to eq 0
+      end
+
+      it 'when with order on locked activity' do
+        request_on_locked_activity
+        expect(response).to have_http_status(:forbidden)
+        expect(Order.count).to eq 2
+        expect(Order.first.order_rows.last.product_count).to eq 2
+      end
+    end
+
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it 'when with order on activity' do
+        request
+        expect(request.status).to eq 200
+        expect(Order.count).to eq 2
+        expect(Order.first.order_rows.first.product_count).to eq 0
+      end
+
+      it 'when with order on locked activity' do
+        request_on_locked_activity
+        expect(response).to have_http_status(:forbidden)
+        expect(Order.count).to eq 2
+        expect(Order.first.order_rows.last.product_count).to eq 2
+      end
+    end
+
+    describe 'when as treasurer' do
+      let(:user) { create(:user, :treasurer) }
+
+      it 'when with order on activity' do
+        request
+        expect(request.status).to eq 200
+        expect(Order.count).to eq 2
+        expect(Order.first.order_rows.first.product_count).to eq 0
+      end
+
+      it 'when with order on locked activity' do
+        request_on_locked_activity
+        expect(response).to have_http_status(:forbidden)
+        expect(Order.count).to eq 2
+        expect(Order.first.order_rows.last.product_count).to eq 2
+      end
+    end
+  end
+end
diff --git a/spec/controllers/orders_controller/index_spec.rb b/spec/controllers/orders_controller/index_spec.rb
index 8164c9cfc..46974cc6e 100644
--- a/spec/controllers/orders_controller/index_spec.rb
+++ b/spec/controllers/orders_controller/index_spec.rb
@@ -3,13 +3,18 @@
 describe OrdersController, type: :controller do
   describe 'GET index' do
     let(:alice) { create(:user, :treasurer) }
+    let(:bob) { create(:user, :renting_manager) }
+    let(:carl) { create(:user, :main_bartender) }
+    let(:amber) { create(:user, :from_amber) }
     let(:eve) { create(:user) }
 
     let(:orders_alice) { create_list(:order, 2, user: alice) }
+    let(:orders_amber) { create_list(:order, 2, user: amber) }
     let(:orders_eve) { create_list(:order, 2, user: eve) }
 
     before do
       orders_alice
+      orders_amber
       orders_eve
     end
 
@@ -21,12 +26,65 @@
         expect(Order.where(user: alice)).to match_array assigns(:orders)
       end
 
-      it 'show other users orders' do
+      it 'show other manual users orders' do
         sign_in alice
         get :index, params: { user_id: eve.id, format: :json }
 
         expect(Order.where(user: eve)).to match_array assigns(:orders)
       end
+
+      it 'shows other amber users orders' do
+        sign_in alice
+        get :index, params: { user_id: amber.id, format: :json }
+
+        expect(Order.where(user: amber)).to match_array assigns(:orders)
+      end
+    end
+
+    context 'when as renting-manager' do
+      it 'shows own orders' do
+        sign_in bob
+        get :index, params: { user_id: bob.id, format: :json }
+
+        expect(Order.where(user: bob)).to match_array assigns(:orders)
+      end
+
+      it 'shows other manual users orders' do
+        sign_in bob
+        get :index, params: { user_id: eve.id, format: :json }
+
+        expect(Order.where(user: eve)).to match_array assigns(:orders)
+      end
+
+      it 'shows other amber users orders' do
+        sign_in bob
+        get :index, params: { user_id: amber.id, format: :json }
+
+        expect(Order.where(user: amber)).to match_array assigns(:orders)
+      end
+    end
+
+    context 'when as main-bartender' do
+      it 'shows own orders' do
+        sign_in carl
+        get :index, params: { user_id: carl.id, format: :json }
+
+        expect(Order.where(user: carl)).to match_array assigns(:orders)
+      end
+
+      it 'shows other manual users orders' do
+        sign_in carl
+        get :index, params: { user_id: eve.id, format: :json }
+
+        expect(Order.where(user: eve)).to match_array assigns(:orders)
+      end
+
+      it 'shows other amber users orders' do
+        sign_in carl
+        get :index, params: { user_id: amber.id, format: :json }
+
+        expect(Order.where(user: amber)).to match_array assigns(:orders)
+      end
     end
 
     context 'when as normal user' do
@@ -37,12 +95,19 @@
         expect(Order.where(user: eve)).to match_array assigns(:orders)
       end
 
-      it 'user cannot see other users orders' do
+      it 'user cannot see other manual users orders' do
         sign_in eve
         get :index, params: { user_id: alice.id, format: :json }
 
         expect(assigns(:orders)).to be_empty
       end
+
+      it 'user cannot see other amber users orders' do
+        sign_in eve
+        get :index, params: { user_id: amber.id, format: :json }
+
+        expect(assigns(:orders)).to be_empty
+      end
     end
   end
 end
diff --git a/spec/controllers/orders_controller/update_spec.rb b/spec/controllers/orders_controller/update_spec.rb
new file mode 100644
index 000000000..1da12b7ad
--- /dev/null
+++ b/spec/controllers/orders_controller/update_spec.rb
@@ -0,0 +1,95 @@
+require 'rails_helper'
+
+describe OrdersController, type: :controller do
+  describe 'PUT update' do
+    let(:activity) { create(:activity) }
+    let(:locked_activity) { create(:activity) }
+    let(:order) do
+      create(:order, activity: activity, user: create(:user))
+    end
+    let(:order_on_locked_activity) do
+      create(:order, activity: locked_activity, user: create(:user))
+    end
+    let(:products) { activity.price_list.products.sample(2) }
+    let(:request) do
+      put :update, params: { id: order.id, order_rows_attributes: [{ id: order.order_rows.first.id, product_count: 3 }] }
+    end
+    let(:request_on_locked_activity) do
+      put :update,
+          params: { id: order_on_locked_activity.id,
+                    order_rows_attributes: [{ id: order_on_locked_activity.order_rows.first.id, product_count: 3 }] }
+    end
+
+    before do
+      create(:order_row, order: order, product_count: 2, product: activity.price_list.products.first)
+      create(:order_row, order: order_on_locked_activity, product_count: 2, product: locked_activity.price_list.products.first)
+      locked_activity.update(locked_by: create(:user))
+
+      sign_in user
+    end
+
+    describe 'when without permission' do
+      let(:user) { create(:user) }
+
+      it 'when with order on activity' do
+        request
+        expect(request.status).to eq 403
+        expect(Order.first.order_rows.first.product_count).to eq 2
+      end
+
+      it 'when with order on locked activty' do
+        request_on_locked_activity
+        expect(request_on_locked_activity.status).to eq 403
+        expect(Order.first.order_rows.first.product_count).to eq 2
+      end
+    end
+
+    describe 'when as main-bartender' do
+      let(:user) { create(:user, :main_bartender) }
+
+      it 'when with order on activity' do
+        request
+        expect(request.status).to eq 200
+        expect(Order.first.order_rows.first.product_count).to eq 3
+      end
+
+      it 'when with order on locked activity' do
+        request_on_locked_activity
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(Order.first.order_rows.last.product_count).to eq 2
+      end
+    end
+
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it 'when with order on activity' do
+        request
+        expect(request.status).to eq 200
+        expect(Order.first.order_rows.first.product_count).to eq 3
+      end
+
+      it 'when with order on locked activity' do
+        request_on_locked_activity
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(Order.first.order_rows.last.product_count).to eq 2
+      end
+    end
+
+    describe 'when as treasurer' do
+      let(:user) { create(:user, :treasurer) }
+
+      it 'when with order on activity' do
+        request
+        expect(request.status).to eq 200
+        expect(Order.first.order_rows.first.product_count).to eq 3
+      end
+
+      it 'when with order on locked activity' do
+        request_on_locked_activity
+        expect(response).to have_http_status(:unprocessable_entity)
+        expect(Order.first.order_rows.last.product_count).to eq 2
+      end
+    end
+  end
+end
diff --git a/spec/controllers/payments_controller/index_spec.rb b/spec/controllers/payments_controller/index_spec.rb
index 1290c97b5..495c5ec7d 100644
--- a/spec/controllers/payments_controller/index_spec.rb
+++ b/spec/controllers/payments_controller/index_spec.rb
@@ -17,6 +17,24 @@
       end
     end
 
+    context 'when as renting-manager' do
+      it 'forbids' do
+        sign_in create(:user, :renting_manager)
+        get :index
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
+    context 'when as main-bartender' do
+      it 'forbids' do
+        sign_in create(:user, :main_bartender)
+        get :index
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
     context 'when as user' do
       it 'forbids' do
         sign_in create(:user)
diff --git a/spec/controllers/price_lists_controller/archive_spec.rb b/spec/controllers/price_lists_controller/archive_spec.rb
new file mode 100644
index 000000000..d50a8d4d8
--- /dev/null
+++ b/spec/controllers/price_lists_controller/archive_spec.rb
@@ -0,0 +1,43 @@
+require 'rails_helper'
+
+describe PriceListsController, type: :controller do
+  describe 'POST /:id/archive' do
+    let(:price_list) do
+      create(:price_list)
+    end
+    let(:request) do
+      post :archive, params: { id: price_list.id, format: :json }
+    end
+
+    before do
+      sign_in user
+      request
+      price_list.reload
+    end
+
+    describe 'treasurer can archive a price_list' do
+      let(:user) { create(:user, :treasurer) }
+
+      it { expect(request.status).to eq 200 }
+      it { expect(price_list.archived_at.today?).to be true }
+    end
+
+    describe 'renting-manager cannot archive a price_list' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'main-bartender cannot archive a price_list' do
+      let(:user) { create(:user, :main_bartender) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'user cannot archive a price_list' do
+      let(:user) { create(:user) }
+
+      it { expect(request.status).to eq 403 }
+    end
+  end
+end
diff --git a/spec/controllers/price_lists_controller/create_spec.rb b/spec/controllers/price_lists_controller/create_spec.rb
new file mode 100644
index 000000000..d95fd49b4
--- /dev/null
+++ b/spec/controllers/price_lists_controller/create_spec.rb
@@ -0,0 +1,38 @@
+require 'rails_helper'
+
+describe PriceListsController, type: :controller do
+  describe 'POST create' do
+    let(:price_list) do
+      build(:price_list)
+    end
+    let(:request) do
+      post :create, params: { price_list: price_list.attributes }
+    end
+
+    it 'treasurer can create a new price_list' do
+      sign_in create(:user, :treasurer)
+      expect { request }.to(change(PriceList, :count).by(1))
+    end
+
+    it 'renting-manager cannot create a new price_list' do
+      sign_in create(:user, :renting_manager)
+      expect { request }.not_to change(PriceList, :count)
+    end
+
+    it 'main-bartender cannot create a new price_list' do
+      sign_in create(:user, :main_bartender)
+      expect { request }.not_to change(PriceList, :count)
+    end
+
+    it 'user cannot create a new price_list' do
+      sign_in create(:user)
+      expect { request }.not_to change(PriceList, :count)
+    end
+
+    it 'redirects after create' do
+      sign_in create(:user, :treasurer)
+      request
+      expect(response).to be_redirect
+    end
+  end
+end
diff --git a/spec/controllers/price_lists_controller/index_spec.rb b/spec/controllers/price_lists_controller/index_spec.rb
new file mode 100644
index 000000000..dbf3f234a
--- /dev/null
+++ b/spec/controllers/price_lists_controller/index_spec.rb
@@ -0,0 +1,52 @@
+require 'rails_helper'
+
+describe PriceListsController, type: :controller do
+  describe 'GET index' do
+    let(:archived_price_lists) { create_list(:price_list, 3, :archived) }
+    let(:unarchived_price_lists) { create_list(:price_list, 3) }
+
+    before do
+      archived_price_lists
+      unarchived_price_lists
+    end
+
+    context 'when as treasurer' do
+      it 'shows all price_lists' do
+        sign_in create(:user, :treasurer)
+        get :index
+
+        expect(assigns(:price_lists_json)).to eq PriceList.all.order(created_at: :desc).to_json(except: %i[created_at updated_at
+                                                                                                           deleted_at])
+      end
+    end
+
+    context 'when as renting-manager' do
+      it 'shows unarchived price_lists' do
+        sign_in create(:user, :renting_manager)
+        get :index
+
+        expect(assigns(:price_lists_json)).to eq PriceList.unarchived.order(created_at: :desc).to_json(except: %i[created_at updated_at
+                                                                                                                  deleted_at])
+      end
+    end
+
+    context 'when as main-bartender' do
+      it 'shows unarchived price_lists' do
+        sign_in create(:user, :main_bartender)
+        get :index
+
+        expect(assigns(:price_lists_json)).to eq PriceList.unarchived.order(created_at: :desc).to_json(except: %i[created_at updated_at
+                                                                                                                  deleted_at])
+      end
+    end
+
+    context 'when as user' do
+      it 'forbids' do
+        sign_in create(:user)
+        get :index
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+  end
+end
diff --git a/spec/controllers/price_lists_controller/unarchive_spec.rb b/spec/controllers/price_lists_controller/unarchive_spec.rb
new file mode 100644
index 000000000..796728f49
--- /dev/null
+++ b/spec/controllers/price_lists_controller/unarchive_spec.rb
@@ -0,0 +1,43 @@
+require 'rails_helper'
+
+describe PriceListsController, type: :controller do
+  describe 'POST /:id/unarchive' do
+    let(:price_list) do
+      create(:price_list)
+    end
+    let(:request) do
+      post :unarchive, params: { id: price_list.id, format: :json }
+    end
+
+    before do
+      sign_in user
+      request
+      price_list.reload
+    end
+
+    describe 'treasurer can unarchive a price_list' do
+      let(:user) { create(:user, :treasurer) }
+
+      it { expect(request.status).to eq 200 }
+      it { expect(price_list.archived_at).to be_nil }
+    end
+
+    describe 'renting-manager cannot unarchive a price_list' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'main-bartender cannot unarchive a price_list' do
+      let(:user) { create(:user, :main_bartender) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'user cannot unarchive a price_list' do
+      let(:user) { create(:user) }
+
+      it { expect(request.status).to eq 403 }
+    end
+  end
+end
diff --git a/spec/controllers/price_lists_controller/update_spec.rb b/spec/controllers/price_lists_controller/update_spec.rb
new file mode 100644
index 000000000..7cb136db8
--- /dev/null
+++ b/spec/controllers/price_lists_controller/update_spec.rb
@@ -0,0 +1,44 @@
+require 'rails_helper'
+
+describe PriceListsController, type: :controller do
+  describe 'PUT update' do
+    let(:price_list) do
+      create(:price_list)
+    end
+    let(:request) do
+      put :update, params: { id: price_list.id, price_list: price_list.attributes }
+    end
+
+    before do
+      sign_in user
+      price_list.name = 'New Name'
+      request
+      price_list.reload
+    end
+
+    describe 'when without permission' do
+      let(:user) { create(:user) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'when as main-bartender' do
+      let(:user) { create(:user, :main_bartender) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'when as treasurer' do
+      let(:user) { create(:user, :treasurer) }
+
+      it { expect(request.status).to eq 302 }
+      it { expect(price_list.name).to eq 'New Name' }
+    end
+  end
+end
diff --git a/spec/controllers/products_controller/create_spec.rb b/spec/controllers/products_controller/create_spec.rb
new file mode 100644
index 000000000..51101e35b
--- /dev/null
+++ b/spec/controllers/products_controller/create_spec.rb
@@ -0,0 +1,32 @@
+require 'rails_helper'
+
+describe ProductsController, type: :controller do
+  describe 'POST create' do
+    let(:product) do
+      build(:product)
+    end
+    let(:request) do
+      post :create, params: { product: product.attributes }
+    end
+
+    it 'treasurer can create a new product' do
+      sign_in create(:user, :treasurer)
+      expect { request }.to(change(Product, :count).by(1))
+    end
+
+    it 'renting-manager cannot create a new product' do
+      sign_in create(:user, :renting_manager)
+      expect { request }.not_to change(Product, :count)
+    end
+
+    it 'main-bartender cannot create a new product' do
+      sign_in create(:user, :main_bartender)
+      expect { request }.not_to change(Product, :count)
+    end
+
+    it 'user cannot create a new product' do
+      sign_in create(:user)
+      expect { request }.not_to change(Product, :count)
+    end
+  end
+end
diff --git a/spec/controllers/products_controller/update_spec.rb b/spec/controllers/products_controller/update_spec.rb
new file mode 100644
index 000000000..8c5c6de7d
--- /dev/null
+++ b/spec/controllers/products_controller/update_spec.rb
@@ -0,0 +1,46 @@
+require 'rails_helper'
+
+describe ProductsController, type: :controller do
+  describe 'PUT update' do
+    let(:product) do
+      create(:product, product_prices: [create(:product_price)])
+    end
+    let(:request) do
+      put :update,
+          params: { id: product.id,
+                    product: product.attributes.merge({ product_prices_attributes: [product.product_prices.first.attributes] }) }
+    end
+
+    before do
+      sign_in user
+      product.product_prices.first.price = 10.00
+      request
+      product.reload
+    end
+
+    describe 'when without permission' do
+      let(:user) { create(:user) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'when as main-bartender' do
+      let(:user) { create(:user, :main_bartender) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'when as treasurer' do
+      let(:user) { create(:user, :treasurer) }
+
+      it { expect(request.status).to eq 200 }
+      it { expect(product.product_prices.first.price).to eq 10.00 }
+    end
+  end
+end
diff --git a/spec/controllers/users_controller/create_spec.rb b/spec/controllers/users_controller/create_spec.rb
new file mode 100644
index 000000000..b2de00877
--- /dev/null
+++ b/spec/controllers/users_controller/create_spec.rb
@@ -0,0 +1,38 @@
+require 'rails_helper'
+
+describe UsersController, type: :controller do
+  describe 'POST create' do
+    let(:user) do
+      build(:user, :manual)
+    end
+    let(:request) do
+      post :create, params: { user: user.attributes }
+    end
+
+    it 'treasurer can create a new user' do
+      sign_in create(:user, :treasurer)
+      expect { request }.to(change(User, :count).by(1))
+    end
+
+    it 'renting-manager cannot create a new user' do
+      sign_in create(:user, :renting_manager)
+      expect { request }.not_to change(User, :count)
+    end
+
+    it 'main-bartender cannot create a new user' do
+      sign_in create(:user, :main_bartender)
+      expect { request }.not_to change(User, :count)
+    end
+
+    it 'user cannot create a new user' do
+      sign_in create(:user)
+      expect { request }.not_to change(User, :count)
+    end
+
+    it 'redirects after create' do
+      sign_in create(:user, :treasurer)
+      request
+      expect(response).to be_redirect
+    end
+  end
+end
diff --git a/spec/controllers/users_controller/index_spec.rb b/spec/controllers/users_controller/index_spec.rb
new file mode 100644
index 000000000..4d2b37dba
--- /dev/null
+++ b/spec/controllers/users_controller/index_spec.rb
@@ -0,0 +1,58 @@
+require 'rails_helper'
+
+describe UsersController, type: :controller do
+  describe 'GET index' do
+    let(:alice) { create(:user, :treasurer, :manual) }
+    let(:bob) { create(:user, :renting_manager, :manual) }
+    let(:carl) { create(:user, :main_bartender, :manual) }
+    let(:amber) { create(:user, :from_amber) }
+    let(:eve) { create(:user, :manual) }
+
+    before do
+      alice
+      bob
+      carl
+      amber
+      eve
+    end
+
+    context 'when as treasurer' do
+      it 'shows all users' do
+        sign_in alice
+        get :index
+
+        expect(assigns(:manual_users).size).to eq 4
+        expect(assigns(:amber_users).size).to eq 1
+      end
+    end
+
+    context 'when as renting-manager' do
+      it 'shows manual users' do
+        sign_in bob
+        get :index
+
+        expect(assigns(:manual_users).size).to eq 4
+        expect(assigns(:amber_users).size).to eq 0
+      end
+    end
+
+    context 'when as main-bartender' do
+      it 'shows own user' do
+        sign_in carl
+        get :index
+
+        expect(assigns(:manual_users).size).to eq 1
+        expect(assigns(:amber_users).size).to eq 0
+      end
+    end
+
+    context 'when as user' do
+      it 'forbids' do
+        sign_in eve
+        get :index
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+  end
+end
diff --git a/spec/controllers/users_controller/show_spec.rb b/spec/controllers/users_controller/show_spec.rb
new file mode 100644
index 000000000..b1b383987
--- /dev/null
+++ b/spec/controllers/users_controller/show_spec.rb
@@ -0,0 +1,77 @@
+require 'rails_helper'
+
+describe UsersController, type: :controller do
+  describe 'GET show' do
+    let(:amber) { create(:user, :from_amber) }
+    let(:eve) { create(:user, :manual) }
+
+    before do
+      amber
+      eve
+    end
+
+    context 'when as treasurer' do
+      it 'shows manual user' do
+        sign_in create(:user, :treasurer)
+        get :show, params: { id: eve.id }
+
+        expect(response).to have_http_status(:ok)
+      end
+
+      it 'shows amber user' do
+        sign_in create(:user, :treasurer)
+        get :show, params: { id: amber.id }
+
+        expect(response).to have_http_status(:ok)
+      end
+    end
+
+    context 'when as renting-manager' do
+      it 'shows manual user' do
+        sign_in create(:user, :renting_manager)
+        get :show, params: { id: eve.id }
+
+        expect(response).to have_http_status(:ok)
+      end
+
+      it 'forbids showing amber user' do
+        sign_in create(:user, :renting_manager)
+        get :show, params: { id: amber.id }
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
+    context 'when as main-bartender' do
+      it 'forbids showing manual user' do
+        sign_in create(:user, :main_bartender)
+        get :show, params: { id: eve.id }
+
+        expect(response).to have_http_status(:forbidden)
+      end
+
+      it 'forbids showing amber user' do
+        sign_in create(:user, :main_bartender)
+        get :show, params: { id: amber.id }
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+
+    context 'when as user' do
+      it 'forbids showing manual user' do
+        sign_in create(:user)
+        get :show, params: { id: eve.id }
+
+        expect(response).to have_http_status(:forbidden)
+      end
+
+      it 'forbids showing amber user' do
+        sign_in create(:user)
+        get :show, params: { id: amber.id }
+
+        expect(response).to have_http_status(:forbidden)
+      end
+    end
+  end
+end
diff --git a/spec/controllers/users_controller/update_spec.rb b/spec/controllers/users_controller/update_spec.rb
new file mode 100644
index 000000000..3d3d6a2ef
--- /dev/null
+++ b/spec/controllers/users_controller/update_spec.rb
@@ -0,0 +1,44 @@
+require 'rails_helper'
+
+describe UsersController, type: :controller do
+  describe 'PUT update' do
+    let(:user) do
+      create(:user, :manual)
+    end
+    let(:request) do
+      put :update, params: { id: user.id, user: user.attributes }
+    end
+
+    before do
+      sign_in user
+      user.name = 'New Name'
+      request
+      user.reload
+    end
+
+    describe 'when as user' do
+      let(:user) { create(:user) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'when as main-bartender' do
+      let(:user) { create(:user, :main_bartender) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'when as renting-manager' do
+      let(:user) { create(:user, :renting_manager) }
+
+      it { expect(request.status).to eq 403 }
+    end
+
+    describe 'when as treasurer' do
+      let(:user) { create(:user, :treasurer) }
+
+      it { expect(request.status).to eq 302 }
+      it { expect(user.name).to eq 'New Name' }
+    end
+  end
+end
diff --git a/spec/factories/price_list.rb b/spec/factories/price_list.rb
index 9960d1804..2044f8c6d 100644
--- a/spec/factories/price_list.rb
+++ b/spec/factories/price_list.rb
@@ -16,6 +16,10 @@
       with_specific_products { true }
     end
 
+    trait :archived do
+      archived_at { 1.day.ago }
+    end
+
     after(:create) do |price_list, evaluator|
       if evaluator.with_all_products
         Product.all.each do |product|
diff --git a/spec/factories/role.rb b/spec/factories/role.rb
index 6deb8d414..4f59d06b0 100644
--- a/spec/factories/role.rb
+++ b/spec/factories/role.rb
@@ -1,6 +1,6 @@
 FactoryBot.define do
   factory :role do
-    role_type { %i[treasurer main_bartender].sample }
+    role_type { %i[treasurer main_bartender renting_manager].sample }
     group_uid { rand(1...100) }
   end
 end
diff --git a/spec/factories/user.rb b/spec/factories/user.rb
index 6beb9806d..5ead18872 100644
--- a/spec/factories/user.rb
+++ b/spec/factories/user.rb
@@ -15,5 +15,19 @@
         user.roles = [FactoryBot.create(:role, role_type: :main_bartender)]
       end
     end
+
+    trait(:renting_manager) do
+      after :create do |user, _evaluator|
+        user.roles = [FactoryBot.create(:role, role_type: :renting_manager)]
+      end
+    end
+
+    trait(:from_amber) do
+      provider { 'amber_oauth2' }
+    end
+
+    trait(:manual) do
+      provider { nil }
+    end
   end
 end
diff --git a/spec/models/role_spec.rb b/spec/models/role_spec.rb
index 1e782d2f7..7e16e5980 100644
--- a/spec/models/role_spec.rb
+++ b/spec/models/role_spec.rb
@@ -26,7 +26,13 @@
       it { expect(role.name).to eq Rails.application.config.x.treasurer_title.capitalize }
     end
 
-    context 'when main bartender' do
+    context 'when renting-manager' do
+      subject(:role) { build_stubbed(:role, role_type: :renting_manager) }
+
+      it { expect(role.name).to eq 'Verhuur manager' }
+    end
+
+    context 'when main-bartender' do
       subject(:role) { build_stubbed(:role, role_type: :main_bartender) }
 
       it { expect(role.name).to eq 'Hoofdtapper' }