GL-S-011Sheet 011RECORDS · SECURITY
commission_rate: the field the vendor could edit.
FIELD CHANGE · COMMISSION RATE · MULTIVENDOR MARKETPLACE · PAYOUTS
General notes
- 01The platform's cut lived on a field the vendor's own settings screen could write to. Nothing needed hacking.
- 02Vendors optimise their cut, not yours. The field was an invitation, and I had written it.
- 03Economic policy is not user data. Rev B: an admin-owned table with caps. The vendor screen lost the write path.
Schedule of permissionsOne field, two revisions
| Rev | Field | Owner | Writable by |
|---|---|---|---|
| A | commission_rate | Platform policy | Vendor settings screen |
| B | commission_rate | Admin table, capped | Admin only |
As posted
The field was called commission_rate. The vendor's settings screen could write to it.
Nothing needed hacking. A number that decided how much they kept sat behind a form.
Economic policy is not user data. It moved to an admin-owned table, with caps.
Sheet 011, NCR 003.