Skip to main content

Route Names & Risk Matrix

Halaman ini memetakan route name (as) dari routes/admin.php ke tujuan operasional dan tingkat risiko aksi.

Kategori risiko​

  • Low: baca data/listing
  • Medium: update konfigurasi non-kritis
  • High: approval/reject/suspend/delete atau aksi yang mempengaruhi transaksi/akses user

Aksi berisiko tinggi (prioritas audit)​

Route name (as)Method/Path (prefix /admin)Controller@methodTujuanRisiko
user_detail.suspendGET users/detail/{users}/suspendUsers\UserController@suspendSuspend userHigh
user_detail.reactivateGET users/detail/{users}/reactivateUsers\UserController@reactivateReactivate userHigh
user_detail.deleteDELETE users/detail/{users}Users\UserController@deleteHapus akun userHigh
user_kyc.approvePOST users/kyc/{users}/approveUsers\AuthenticationInfoController@approveApprove KYCHigh
user_kyc.rejectPOST users/kyc/{users}/rejectUsers\AuthenticationInfoController@rejectReject KYCHigh
user_kyc.suspendPOST users/kyc/{users}/suspendUsers\AuthenticationInfoController@suspendSuspend KYC/userHigh
pending_deposit.approve1GET wallets/pending-deposit/{cashDeposits}/approve1Wallets\CashDepositController@approve1Approve deposit tahap 1High
pending_deposit.approve2GET wallets/pending-deposit/{cashDeposits}/approve2Wallets\CashDepositController@approve2Approve deposit tahap 2High
pending_deposit.rejectPOST wallets/pending-deposit/{cashDeposits}/rejectWallets\CashDepositController@rejectTolak depositHigh
withdrawal.approve1GET wallets/withdrawal/{userWithdrawals}/approve1Wallets\UserWithdrawalController@approve1Approve withdraw tahap 1High
withdrawal.approve2GET wallets/withdrawal/{userWithdrawals}/approve2Wallets\UserWithdrawalController@approve2Approve withdraw tahap 2High
withdrawal.rejectGET wallets/withdrawal/{userWithdrawals}/rejectWallets\UserWithdrawalController@rejectTolak withdrawHigh
configuration.updateStatusPOST wallets/configuration/update-statusWallets\WalletConfigurationController@updateStatusBuka/tutup deposit/withdrawHigh
administrator.deleteDELETE setting/administrator/{admin}/deleteSettings\AdministratorController@deleteHapus adminHigh
administrator_role.deleteDELETE setting/role/{role}/deleteSettings\AdministratorRoleController@deleteHapus roleHigh
maintenance_mode.update_statusPUT setting/maintenance/statusSettings\MaintenanceController@updateStatusToggle maintenance modeHigh
maintenance_mode.add_whitelistPOST setting/maintenance/whitelistSettings\MaintenanceController@addWhitelistTambah bypass maintenanceHigh
maintenance_mode.remove_whitelistDELETE setting/maintenance/whitelist/{id}Settings\MaintenanceController@removeWhitelistHapus bypass maintenanceHigh
send (email blast)POST setting/email-blast/{id}/sendSettings\EmailBlastController@sendKirim mass emailHigh
destroy (settings/data)DELETE settings/data/{setting}Settings\SettingController@destroyHapus setting globalHigh

Aksi medium (konfigurasi penting)​

Route name (as)Method/PathTujuanRisiko
withdrawal_setting.updatePUT/PATCH wallets/withdrawal-setting/{dicts}/updateUbah rule withdrawalMedium
listed_coins.updatePUT/PATCH setting/listed-coins/{coin}/updateUpdate listed coinMedium
listed_coins.asset_information.updatePUT/PATCH setting/listed-coins/{symbol}/asset-information/updateUpdate konten info asetMedium
txpair.updatePUT/PATCH setting/txpair/{txpair}/updateUbah pair tradingMedium
currency.updatePUT/PATCH setting/currency/{currency}/updateUbah mata uangMedium
fireblock.update_gas_stationPUT setting/fireblock/gas-station/Update gas station globalMedium
gas_fee.updatePUT setting/gas-fee/update/{id}Update gas feeMedium
sync_gas_feeGET setting/gas-fee/sync-gas-fee/{id}Sinkronisasi gas feeMedium

Aksi low (read/reporting)​

  • population_summary.index, user_detail.index, user_kyc.index
  • deposit.index, withdrawal.index, summary.index
  • operation.index, real_time_balance.index, tax_report.*
  • asset_transaction_report.*, quarterly_risk_assessment.index
  • report.cfx.index, report.kki.index, report.icc.index

Rekomendasi kontrol​

  • Wajibkan role-based permission ketat untuk semua route High.
  • Simpan audit trail siapa mengeksekusi route approve/reject/delete.
  • Terapkan dual-control untuk aksi approval final (approve2) dan maintenance toggle.
  • Batasi endpoint uji (send.notification, fcm.test) hanya untuk role tertentu.