Permissions hard coded to staff

After some testing today, I found that many of the permissions for erp is hard coded to staff, giving access to some modules/menu and not other modules/menu. Creating a copy role of staff and giving a user access using this role, would not let me into the items modules.