URS-008 · Restrict Reps from Editing Accounts Outside Territory

Status: PASS  ·  Duration: 56s  ·  Run Date: April 21, 2026

---

Test Scenarios

Step 1: Rep login

PASS

---

Step 2: Rep accounts list

PASS

---

Step 3: In-territory account (read-only)

PASS

---

Step 4: Out-of-territory account (restricted)

PASS

---

Step 5: Admin can edit (comparison)

PASS

Recordings

step 01 rep login

step 02 rep accounts list

step 03 rep in territory account

step 04 rep out of territory account

step 05 admin can edit

Database Validations

Rep has Sales Representative role

PASS

Bob Kauffman should have the Sales Representative role (not admin) for this test

SELECT u.email, u.name, r.name as role_name, r.id as role_id
      FROM users u
      JOIN user_roles ur ON ur.user_id = u.id
      JOIN roles r ON r.id = ur.role_id
      WHERE u.id = $1 AND ur.organization_id = $2

email	name	role_name	role_id
bob.kauffman@stellartech.com	Bob Kauffman	Sales Representative	d2e3f4a5-b6c7-8901-def0-123456789abc

---

Rep assigned to in-territory account

PASS

Bob Kauffman should have an active assignment to the BOSS account

SELECT sa.name as account_name, saua.active, saua.representative_type
      FROM sales_account_user_assignments saua
      JOIN sales_accounts sa ON sa.id = saua.sales_account_id
      WHERE saua.user_id = $1 AND saua.sales_account_id = $2 AND saua.active = true

account_name	active	representative_type
BOSS Surgical Account Request	true	salesperson

---

Rep NOT assigned to out-of-territory account

PASS

Bob Kauffman should NOT have an assignment to the Connecticut Ortho account

SELECT sa.name as account_name, saua.active
      FROM sales_account_user_assignments saua
      JOIN sales_accounts sa ON sa.id = saua.sales_account_id
      WHERE saua.user_id = $1 AND saua.sales_account_id = $2 AND saua.active = true

No rows returned.

---

Sales Rep role lacks manage permission

PASS

The Sales Representative role should NOT have the sales_accounts:manage permission

SELECT p.permission
      FROM permissions p
      WHERE p.actor_id = $1
      AND p.permission = 'sales_accounts:manage'

No rows returned.

---

Admin role has manage permission

PASS

The Admin role should have the sales_accounts:manage permission

SELECT p.permission
      FROM permissions p
      WHERE p.actor_id = $1
      AND p.permission = 'sales_accounts:manage'

permission
sales_accounts:manage

---

Admin user has Admin role

PASS

Dan Distributor should have the Admin role for comparison

SELECT u.email, u.name, r.name as role_name, r.id as role_id
      FROM users u
      JOIN user_roles ur ON ur.user_id = u.id
      JOIN roles r ON r.id = ur.role_id
      WHERE u.id = $1 AND ur.organization_id = $2

email	name	role_name	role_id
dan.distributor@stellartech.com	Dan Distributor	StellarTech Admin	40e1f2a3-b4c5-6789-4567-890123456789

Downloads

• audit-events.json
• report.md
• result.json
• screenshots-index.json

Feedback