TC-ADMIN-006: Super-Admin Tenant Detail — Split, Attestation & Finance
🆕 New on stage — 2026-06-25 → 2026-06-29. This TC covers the SUPER_ADMIN-only commercial-field redaction on tenant detail (
getTenantHandler, #452-adjacent hardening) and the platform finance wiring on the Org Controls billing overview: commercial split + PayBiz attestation fields visible to SUPER_ADMIN only — redacted for PLATFORM_SUPPORT — and the platform finance views on stg-admin.membervu.com showing correct per-tenant totals in ₱ (#452, #493). See the Test Plan banners and the Jun 25 / Jun 29 release notes.
Module: Admin — Platform Administration (Admin Portal, stg-admin.membervu.com)
Primary Test User: superadmin@zeniark.com / SuperAdmin123! (SUPER_ADMIN); a throwaway PLATFORM_SUPPORT user created in-test for the negative case
Priority: P1 (commercial-data redaction is a security-relevant boundary)
Objectives
- As SUPER_ADMIN, open a tenant's detail page and confirm the commercial split fields (
splitPercentBps/splitFixedCentavos) and PayBiz attestation fields (paybizUrlAttestationAt/paybizUrlAttestorId) are visible with correct values, on their respective tabs. - As a
PLATFORM_SUPPORToperator (non-super-admin platform role), confirm the same fields are absent — both the tabs that host them and the raw API response. - Confirm the Org Controls platform finance/billing overview shows correct per-tenant totals in ₱ (peso), reachable by both SUPER_ADMIN and PLATFORM_SUPPORT (this view is NOT redacted).
Scenario summary
| ID | Scenario | Key data assertion |
|---|---|---|
| ADM6-01 | SUPER_ADMIN sees Split Agreement tab + values | GET /api/platform/tenants/:tenantIdOrSlug response includes splitPercentBps, splitFixedCentavos for a SUPER_ADMIN caller; the Split Agreement tab renders on TenantDetailPage and shows the exact configured value (BPS or fixed centavos formatted as ₱). |
| ADM6-02 | SUPER_ADMIN sees PayBiz attestation | Response includes paybizUrlAttestationAt + paybizUrlAttestorId; the PayBiz Config tab shows the attestation date/attestor once a tenant has been attested (or shows the attestation checkbox on first APPROVED transition if not yet attested). |
| ADM6-03 | PLATFORM_SUPPORT: fields redacted from API | Same endpoint, same tenant, called by a PLATFORM_SUPPORT-only user: response does NOT contain any of the 10 commercial fields (paybizOnboardingStatus, paybizWalletId, paymentsEnabled, platformFeePercent, platformFeeFixed, processingFeePercent, splitPercentBps, splitFixedCentavos, paybizUrlAttestationAt, paybizUrlAttestorId) — verify via browser dev tools Network tab. |
| ADM6-04 | PLATFORM_SUPPORT: tabs absent in UI | Logged in as PLATFORM_SUPPORT, the tenant detail page shows only Overview and Events tabs — Platform Channels, PayBiz Config, and Split Agreement tabs are not rendered at all (not just disabled). |
| ADM6-05 | Platform finance overview — correct ₱ totals | GET /api/platform/billing/overview (reachable by both roles) returns per-tenant totalRevenue/outstanding in pesos (major units); Org Controls UI renders them with the ₱ symbol, matching the raw API values exactly. |
➡️ Full click-by-click steps: TC-ADMIN-006 (Detailed).