A payment dashboard needs authorization on the server, not only hidden menu buttons. Coinvay separates merchant-owned records from administrative operations, and application access should stay limited to the account and role that actually need it.
Distinguish public checkout from private operations
A buyer can open an invoice’s public checkout link without receiving the merchant’s dashboard permissions. Private invoice lookup, API-key management and account settings have different authentication requirements. For example, sharing a payment link with a customer should not expose the merchant’s other invoices, credentials or administrative functions. Do not reuse dashboard cookies as a server integration method or place privileged tokens into the shared checkout URL.
Review every access path
API calls must enforce ownership even when someone guesses or modifies a record ID. The browser’s current page name is not a role assignment, and hiding an administrator sign-in link does not replace authorization. An ordinary merchant integration key should have only its documented merchant behavior; Coinvay requires interactive sign-in to create replacement API keys. Administrative actions belong to administrator sessions with the required account confirmation, not to a conveniently named frontend route.
Operate account changes deliberately
For a business with separate developer and finance operators, document who owns the merchant account, who manages the receiving wallet and who can administer the service. Review connected login methods and revoke unused integration keys. Suspending a merchant account changes application access; it does not give the administrator custody over the merchant’s private wallet. Keep audit evidence of important changes and verify that a role or status update produces the intended access result. Avoid granting broad administrator access merely to solve a temporary support issue.
Practical checklist
- Require server-side ownership and role checks for every private record operation.
- Keep public checkout capabilities separate from merchant and administrator credentials.
- Review account status, connected login providers and unused keys as personnel or systems change.
Common questions
Does hiding an administrator button secure the admin API?+
No. Visibility is a user-interface choice. Server authorization must still reject unauthorized requests.
Does administrator access mean control over merchant wallet funds?+
No. Direct-wallet funds remain controlled by the wallet keys. Dashboard administration and on-chain signing authority are different responsibilities.
Sources and further reading
Primary references and Coinvay product documentation. Check the linked pages for current details.
AI-assisted drafting, published by Coinvay. Examples are illustrative. Read our editorial approach.