Role Hierarchy — Test Cases
Feature version: v1.0
Reference doc: System Overview
Result notation: ✅ Pass | ❌ Fail | ⏭ Skip | 🐛 Fail + bug report
Changelog
| Date | Version | Change | Author |
|---|---|---|---|
| 2026-05-10 | v1.0 | Initial creation | — |
TC-ARCH-001 — Account creation hierarchy 🆕 NEW
Precondition: Admin account exists. Each tier must be created before testing the tier below it.
| # | Description | Steps | Expected Result | Actual Result |
|---|---|---|---|---|
| 1 | Admin creates a Super Agent | Log in to Admin panel → Create a Super Agent account | Super Agent account created successfully | |
| 2 | Super Agent creates an Agent | Log in to Super Agent portal → Create an Agent account | Agent account created successfully | |
| 3 | Agent creates a Shop | Log in to Agent portal → Create a Shop account | Shop account created successfully | |
| 4 | Shop creates a Player | Log in to Shop portal → Create a Player account | Player account created successfully | |
| 5 | Shop cannot create an Agent | Log in to Shop portal → Attempt to create an Agent | System rejects the request with a permission error | |
| 6 | Agent cannot create a Super Agent | Log in to Agent portal → Attempt to create a Super Agent | System rejects the request with a permission error |
TC-ARCH-002 — Session isolation by role 🆕 NEW
Precondition: Valid auth tokens are available for each role.
| # | Description | Steps | Expected Result | Actual Result |
|---|---|---|---|---|
| 1 | Shop session cannot access Agent-level APIs | Use a Shop token to call an Agent-only API endpoint | HTTP 403 or 401 | |
| 2 | Player session cannot access Admin APIs | Use a Player token to call /api/admin/* | HTTP 403 or 401 |