Least-Privilege Access Control Policy

Access to seller and buyer data is restricted by user account, marketplace account ownership, and administrator need-to-know.

Status: Published

Last reviewed: June 21, 2026

Owner: Leo Infinity product owner

Text to paste

Answer: Yes

Yes. Leo Infinity has a published access-control policy based on least privilege. Seller data is separated by authenticated user account, marketplace account ownership is checked server-side, administrative access is limited to approved operators, and service-role credentials are kept out of the browser. Evidence: https://app.leo.com.vc/seguranca/least-privilege-access-control

Policy controls

Each application user can access only the marketplace accounts connected to that user's profile.
Server-side routes verify login before returning account, order, product, cost, shipment, or invoice data.
Administrative actions are limited to approved operators and are not exposed to regular seller accounts.
Production database service-role credentials are protected and never shipped to client-side JavaScript.

Evidence notes

Authenticated session middleware protects private pages and APIs.
Marketplace connection records are associated with application users.
Admin pages are separate from seller pages.