Permissions + roles

• Staff need the data feeds or catalog (manage catalog) permission to create, generate or delete feeds. Set it in Customers → User Groups.
• The public feed address needs no login — anyone with the address can download the file. Use Regenerate Token if it leaks.
• Sellers can't create feeds.