Pending Company

New company awaiting approval — holds a single permission by design.

1 min read

Pending Company

Summary. A transitional, deliberately least-privilege role. When someone signs up on a company plan, their account lands here — holding exactly one permission — until an admin approves the registration request and elevates it to a real company role. This is a security control (#985): a public self-signup must never self-grant delivery_company_admin.

What you can do

  • View only your own pending subscription (view my-subscription).

What you cannot do

  • Nothing else — no company, users, orders, drivers, inventory, products, or finance.
  • Cannot self-promote to a company admin role.

Data scope

Own pending subscription only. There is no company bound to the account yet, so there is nothing else to scope to.

Permissions

Exact list (synced in SaasRoleSeeder): view my-subscription — a single permission.

How this role is assigned

Assigned automatically at public company-plan registration. When an admin approves the matching RegistrationRequest at /admin (manage registration-requests), the company is bound and the account is elevated to delivery_company_admin (registration approval only ever yields delivery_company_admin or client; other roles such as storage_company_admin are granted manually).

See roles/delivery-company-admin and roles/storage-company-admin (the roles this one is promoted into).