Skip to content
LionPOS

Test cases: Admin organization & RBAC

Document control

Section titled “Document control”
VersionDate (UTC)Summary
1.0.02026-05-13Initial sheet — routes under dashboard for org + access control

Scope

Section titled “Scope”
  • App: apps/admin-web — ADMIN_ROUTES for managers, stores, vendors, roles, modules, marketing banners, settings, profile (Frontend applications).
  • API pairing: Admin backend (zones, modules, JWT).
  • Not in this sheet: catalog products, B2B orders, membership billing, client events, support tickets, notifications (System test cases index).

Scenario catalogue

Section titled “Scenario catalogue”

Managers (platform staff)

Section titled “Managers (platform staff)”
IDClassScenarioAutomation
TC-AOR-001HappyManagers list loads with pagination + searchE2E*
TC-AOR-002HappyCreate manager → form validation (RHF + Zod) → success toastE2E*
TC-AOR-003HappyManager detail shows identity + role linksE2E*
TC-AOR-004UnhappyDuplicate email / invalid phone → field errors, no silent 500E2E*
TC-AOR-005UnhappyNon-master hits manager write route without module → 403 UIE2E*

Stores & vendors (tenancy)

Section titled “Stores & vendors (tenancy)”
IDClassScenarioAutomation
TC-AOR-010HappyStores list respects zone filter; KPI or counts consistentE2E*
TC-AOR-011HappyStore detail ?create=1 / ?edit=1 legacy redirects resolveE2E*
TC-AOR-012UnhappyZoned admin opens store outside zone → 403 or empty guarded stateE2E*
TC-AOR-013HappyVendors list + search + paginationE2E*
TC-AOR-014HappyVendor create/edit form submits; assign-package flow when presentE2E*
TC-AOR-015UnhappyDelete store/vendor blocked when entity delete guards apply → actionable messageE2E*

Roles & modules

Section titled “Roles & modules”
IDClassScenarioAutomation
TC-AOR-020HappyRoles list + create role → permission matrix savedE2E*
TC-AOR-021HappyRole detail shows assigned managers count / linksE2E*
TC-AOR-022UnhappyDelete role still assigned → API error mapped to toastE2E*
TC-AOR-023HappyModules directory lists modules; detail page loadsE2E*
TC-AOR-024UnhappyDeep link to module without access → 403 shellE2E*

Marketing, settings, profile

Section titled “Marketing, settings, profile”
IDClassScenarioAutomation
TC-AOR-030HappyMarketing banners list CRUD (create, toggle, reorder if supported)E2E*
TC-AOR-031UnhappyInvalid image URL or oversize asset → validation before saveE2E*
TC-AOR-032HappySettings page loads; save changes refetches session where neededE2E*
TC-AOR-033HappyProfile page: update display fieldsE2E*
TC-AOR-034UnhappyProfile password change wrong current password → errorE2E*

Coverage checklist (this sheet)

Section titled “Coverage checklist (this sheet)”
  • Each new ADMIN_ROUTES.* screen under org/RBAC has a TC-AOR- row or a child sheet
  • Zone matrix from Admin backend kept in sync when store/vendor APIs change
  • Align with Auth & public for password / OTP flows touching profile

Parent index: System test cases (index)