Configuration
Tenant and platform administration: centres and their modules, staff accounts, reference data, dashboards and operational tooling.
16 features · 57 use cases · 19 happy paths · 66 failure paths · 7 open findings
mindmap root((Configuration)) Centre list and export Centre editor modules, app config, integrat… Staff member list, deletion and restore Staff member editor levels, scope, API token Channels Extra attributes Email template preview and test send Dashboard configuration Influence zones Server incidents Server command runner CLI Accessibility statement Mobile app configuration Customer login methods Google, Facebook Third-party integrations and connectors Social wifi and location services
Features
| Feature | Modules | Use | ✅ | ⛔ | Risk |
|---|---|---|---|---|---|
| Centre list & export Lists every centre the user can administer with its id, name, whether it has a mobile app and which modules are enabled, plus a CSV download… | — | 3 | 1 | 2 | — |
| Centre editor (modules, app config, integrations) The control panel for a whole tenant: identity and locale (name, languages, default language, timezone, latitude/longitude, email from/to), … | — | 7 | 2 | 9 | — |
| Staff member list, deletion & restore Lists back-office users with name, email, level and status, and supports both deleting and restoring an account — so deletion is reversible … | — | 3 | 1 | 3 | — |
| Staff member editor (levels, scope, API token) Creates and edits a back-office account: identity, level, which centres and stores it can see, which dashboards it gets, channel and country… | employees_segments | 5 | 2 | 10 | 🟠 Medium |
| Channels Manages the registration/publication channels (app, web, play centre, social wifi, totem, other) that customers, proposals and extra attribu… | — | 3 | 1 | 2 | 🔵 Low |
| Extra attributes Defines the custom fields a centre can add to stores and proposals: a label, a code, a data type (text, HTML, image, URL, address, audio, ac… | extra | 4 | 1 | 5 | 🔵 Low |
| Email template preview & test send Browse the centre’s transactional email templates, preview the rendered HTML and send a test copy to an address to check how it looks in a r… | — | 3 | 1 | 4 | — |
| Dashboard configuration Defines the dashboards available in the app: a name, a category (general / home / traffic), a panel type (data-quality, custom, external URL… | analytics | 4 | 2 | 5 | 🟠 Medium |
| Influence zones Maps postal codes to named catchment zones (primary, secondary, tertiary and so on), so customer registrations can be analysed by catchment.… | influence-zone | 3 | 1 | 3 | 🔵 Low |
| Server incidents Lets platform administrators publish an incident notice (title, description) that every signed-in user sees as an in-app banner, and mark it… | — | 3 | 1 | 4 | 🟠 Medium |
| Server command runner (CLI) A root-only console that posts a named Laravel Artisan command plus a JSON parameter object to the backend and reports whether it succeeded. | — | 3 | 1 | 5 | 🔵 Low |
| Accessibility statement Displays the product’s accessibility declaration as an embedded PDF ( assets/images/declaracion_accesibilidad.pdf). | — | 2 | 1 | 2 | 🔵 Low |
| Mobile app configuration Per-centre settings for the customer mobile app: which app sections are on (welcome, featured, events, cinema, directions, play centre, serv… | — | 4 | 1 | 3 | — |
| Customer login methods (Google, Facebook) Chooses how customers can sign in to the centre’s app and web: a Google OAuth project selected from the platform’s registered Google login c… | — | 3 | 1 | 3 | — |
| Third-party integrations & connectors The per-centre connector settings: Connectif (marketing automation API URL and key), cinema listings (theatre API and id, app/web channels),… | app_operator, blog, cashback, connectif, email_validation, form_commerces, forms, movies, tally | 4 | 1 | 3 | — |
| Social wifi & location services Configures the centre’s social wifi (Flame: network SSID and security type — open, WEP, WPA or PEAP) so the app can connect customers, and t… | foreground_location | 3 | 1 | 3 | — |
Findings in this area
- 🟠 Medium R11 · Dashboard component JSON is parsed unguarded
- 🟠 Medium R15 · 19 translation keys used by the code do not exist
- 🔵 Low R17 · CLI gives no feedback on network failure
- 🔵 Low R21 · Required-extra errors are untranslated
- 🔵 Low R23 · Channels cannot be edited
- 🔵 Low R24 · Influence-zone load errors look like an empty list
- 🔵 Low R25 · Accessibility statement has no PDF fallback