diff --git a/docs/core_saas_and_rbac_engine/SYSTEM_CREDENTIALS_AND_TEST_ACCOUNTS.md b/docs/core_saas_and_rbac_engine/SYSTEM_CREDENTIALS_AND_TEST_ACCOUNTS.md new file mode 100644 index 0000000..1266588 --- /dev/null +++ b/docs/core_saas_and_rbac_engine/SYSTEM_CREDENTIALS_AND_TEST_ACCOUNTS.md @@ -0,0 +1,39 @@ +# 🔑 Master System Credentials & Demo Test Accounts + +> **Environment**: Local Development / Staging +> **Frontend URL**: `http://localhost:5173` +> **Backend API URL**: `http://localhost:5002` + +--- + +## 👑 1. Platform Super-Administrator (Global SaaS Realm) +*Has global cross-tenant management, tenant provisioning, and support impersonation permissions.* + +| Role | Email | Password | Tenant Scope | Access Scope | +| :--- | :--- | :--- | :--- | :--- | +| **Platform SuperAdmin** | `superadmin@maskan.com` | `Admin@123` | Global (`NULL`) | Full SaaS & Platform access | + +--- + +## 🏢 2. Tenant Workspace Accounts (`Tenant ID: 19 - TechNova`) +*These accounts represent different job functions inside the active `TechNova` organization to test fine-grained RBAC permission matrix.* + +| Role / Job Title | Email | Password | Role Code | Permissions & Access Scope | +| :--- | :--- | :--- | :--- | :--- | +| **Tenant Administrator** | `technova1@gmail.com` | `Admin@123` | `TENANT_ADMIN` | Full workspace admin (all 7 action keys on all modules) | +| **Catalog Manager** | `catalog.manager@technova1.com` | `Admin@123` | `CATALOG_MANAGER` | Full catalog, taxonomy, and attribute creation/editing rights | +| **Product Editor** | `product.editor@technova1.com` | `Admin@123` | `PRODUCT_EDITOR` | Can create & edit products, but cannot delete or modify roles | +| **DAM Asset Lead** | `asset.manager@technova1.com` | `Admin@123` | `ASSET_MANAGER` | Media library uploads, asset types, and asset families | +| **Channel Publisher** | `channel.publisher@technova1.com` | `Admin@123` | `CHANNEL_PUBLISHER` | Channel syndication, marketplace mappings, and live sync | +| **Catalog Viewer** | `catalog.viewer@technova1.com` | `Admin@123` | `CATALOG_VIEWER` | Read-only access (cannot create, edit, or delete any record) | + +--- + +## 🚀 Quick Verification via API + +```bash +# Test Login via Terminal +curl -X POST http://localhost:5002/api/v1/auth/login \ + -H "Content-Type: application/json" \ + -d '{"email":"technova1@gmail.com","password":"Admin@123"}' +```