SECTION 8.12.1: SHOP ASSISTANT SCOPED ACCESS & SAFETY GUARDRAILS

Visit Marketplace
Section 8.12.1: Shop Assistant Scoped Access & Safety Guardrails
Delegated assistant boundaries: least privilege, scoped shop permissions, credential safety, and conduct rules.
Role: Shop Assistant Level: Level 20 (Staff Secondary) Clause: CLAUSE-8.12.1 STF-8121-ASSISTANT-PRIVILEGES Tier 2 (Moderate Severity)
Compliance Safe & Role-Enforced
Governed Models: Shopassistant UserScopedRole RoleManagementRule Shop

1. Role Operational Scope & Responsibilities

Establishes operational boundaries for delegated Shop Assistants, least-privilege scoped permissions, customer interaction etiquette, and credential safeguarding.

2. Standard Operating Procedures & Model Rules

Users operating under the Shop Assistant role must execute standard operating procedures in accordance with the following model-level rules:

  • Shop Assistants operate strictly within assigned shop boundaries (`UserScopedRole`), with zero visibility into parent merchant banking or corporate KYC.
  • Assistants may process orders, update shipping tracking, and communicate with buyers on active orders.
  • Assistants must never share individual login credentials or transfer session tokens to third-party devices.

3. Prohibited Operational Conduct & Model Abuse

The following actions constitute unauthorized privilege abuse or role misconduct, triggering automated Warning and Violation System intervention:

  1. Attempting to modify merchant bank payout account numbers or view root merchant tax credentials.
  2. Sharing client contact details with competitor sellers or personal marketing databases.
  3. Soliciting off-platform payments or side tips from marketplace buyers.

4. Warning & Disciplinary Enforcement Matrix

Specific infractions under this role are mapped directly to disciplinary and operational sanctions:

Violation Code Offense Description Detection Method Severity Tier Cure Window Mandatory Sanction
VIOL-8121-01 Attempted unauthorized access to merchant bank payout settings. RBAC Scoped Permission Trap Tier 4 (Critical) Immediate Assistant account permanently terminated, IP blocked, merchant notified.
VIOL-8121-02 Soliciting private side deals or tips from customers in order messages. Chat NLP Policy Scanner Tier 3 (High) Immediate Assistant messaging disabled, 2 Strike Points, merchant notified.
VIOL-8121-03 Concurrent login detected from disparate geographic IP addresses. Session Concurrency Monitor Tier 1 (Advisory) Immediate Secondary session terminated; password reset challenge forced.

5. Platform Protection & Regulatory Safe Harbor

Role Fiduciary Responsibility: Operating under the Shop Assistant role creates a strict fiduciary duty to preserve platform confidentiality, data protection compliance, and operational integrity.

Marketplace Skin Protection: ePaisay disclaims all vicarious liability for rogue, ultra vires, or unauthorized actions committed by users exceeding their delegated role permissions.

Audit & Revocation: The platform maintains complete, unalterable telemetry over all model mutations executed by this role. Unilateral suspension or credential revocation will occur upon verified policy non-compliance.

Last updated: Oct 01, 2025