Zavvion Events Commercial Lite MVP - Graphical Site And Workflow Map

Home is the central brain. Each branch shows role entry points, menu items, and workflows testers must verify.

Central brainHome

Brand header, Discover, Sign in/Register, Host events, public navigation, role routing.

Public Visitor

  • Home
    • Discover events
    • Host events CTA
    • Sign in/Register
  • Events listing
    • Search/filter/sort
    • Open event detail
  • Event detail
    • About
    • Booking tab
    • Seat-map tab
    • Checkout entry

Customer Login

  • My tickets
    • Upcoming
    • Past
    • Orders
    • Ticket/QR
  • Profile
    • Contact details
    • Communication preferences
    • Privacy/data requests
  • Booking
    • Reserved seats
    • Non reserved seats
    • Promo/donation if configured
    • Stripe checkout

Organiser Login

  • Events
    • Create future event
    • Edit event data
    • Media per event
    • Publish checks
  • Venues
    • Create venue
    • Seat-plan builder
    • Reusable seat maps
    • Upload/replace PDF/image per map
  • Ticketing
    • Reusable catalogue
    • Event-level price/quantity/max order
    • Section ticket allocation
    • Remove event allocations
  • Finance/Stripe
    • Connect Stripe
    • Readiness
    • Sales summaries

Platform Organiser

  • Global support login
    • Select organiser context
    • Use organiser workflows
    • Audit support changes
  • Boundaries
    • No fee rules
    • No organiser approvals
    • No super admin controls
    • No customer PII beyond allowed views

Platform Admin

  • Admin dashboard
    • System health
    • Deployment readiness
  • Organisers
    • Review applications
    • Approve/reject/request info
  • Fee rules
    • Add/edit/deactivate/delete
    • Conflict blocking
  • Security oversight
    • Role boundaries
    • Payment readiness
    • Audit logs

Critical End-To-End Workflows

1. Organiser launch

Create venue -> create reusable seat map -> create reserved/non-reserved sections -> upload seat-map PDF/image -> create future event -> attach exact seat map -> configure event ticket prices -> publish.

2. Public purchase

Discover event -> choose Booking tab -> select reserved seat or non-reserved quantity -> assign ticket types -> checkout -> signed Stripe webhook -> ticket/QR issued.

3. Admin governance

Review organiser application -> approve -> configure non-conflicting fee rules -> monitor Stripe/readiness -> verify no secrets or unsafe states.

4. Security challenge

Try role escalation, ID swapping, forged payment redirects, unsigned webhooks, XSS labels, unsafe uploads, and cross-tenant access.