# Dashboard Premium Audit Inventory

Generated: 2026-08-02T17:30:36.724Z
Revision: 93befffa

## Summary

- modules: 54
- routes: 330
- getRoutes: 163
- mutationRoutes: 167
- uploadMutations: 45
- ejsFiles: 491
- candidatePageViews: 188
- missingCsrf: 0
- missingPermission: 0
- nativeDialogs: 0

## Route groups

| Module | Routes | GET | Mutations | Missing CSRF | Missing permission |
| --- | ---: | ---: | ---: | ---: | ---: |
| ^\ | 5 | 5 | 0 | 0 | 0 |
| advertisements | 13 | 5 | 8 | 0 | 0 |
| archives | 2 | 1 | 1 | 0 | 0 |
| attributes | 21 | 9 | 12 | 0 | 0 |
| auctions | 12 | 4 | 8 | 0 | 0 |
| changeLanguagePublic | 1 | 1 | 0 | 0 | 0 |
| changePassword | 1 | 0 | 1 | 0 | 1 |
| changeThem | 1 | 1 | 0 | 0 | 0 |
| cities | 11 | 6 | 5 | 0 | 0 |
| clients | 18 | 7 | 11 | 0 | 0 |
| complaints | 4 | 2 | 2 | 0 | 0 |
| contactUs | 5 | 3 | 2 | 0 | 0 |
| countries | 9 | 4 | 5 | 0 | 0 |
| coupons | 6 | 2 | 4 | 0 | 0 |
| departments | 7 | 3 | 4 | 0 | 0 |
| fqs | 7 | 4 | 3 | 0 | 0 |
| general-settings | 1 | 1 | 0 | 0 | 0 |
| howWorks | 6 | 3 | 3 | 0 | 0 |
| index | 2 | 2 | 0 | 0 | 0 |
| infoMessages | 4 | 2 | 2 | 0 | 0 |
| infoPartners | 6 | 3 | 3 | 0 | 0 |
| infoServices | 6 | 3 | 3 | 0 | 0 |
| infoSettings | 2 | 1 | 1 | 0 | 0 |
| infoSliders | 6 | 3 | 3 | 0 | 0 |
| intros | 6 | 3 | 3 | 0 | 0 |
| login | 2 | 1 | 1 | 0 | 1 |
| logout | 1 | 0 | 1 | 0 | 1 |
| notifications | 6 | 3 | 3 | 0 | 0 |
| orders | 8 | 6 | 2 | 0 | 0 |
| packageFeatures | 6 | 3 | 3 | 0 | 0 |
| packages | 6 | 3 | 3 | 0 | 0 |
| payments | 5 | 3 | 2 | 0 | 0 |
| permissions | 7 | 4 | 3 | 0 | 0 |
| premiumPackages | 6 | 3 | 3 | 0 | 0 |
| product-report-reasons | 9 | 5 | 4 | 0 | 0 |
| product-reports | 4 | 3 | 1 | 0 | 0 |
| products | 16 | 7 | 9 | 0 | 0 |
| profile | 1 | 1 | 0 | 0 | 0 |
| profits | 3 | 2 | 1 | 0 | 0 |
| providers | 15 | 6 | 9 | 0 | 0 |
| providersMeta | 4 | 2 | 2 | 0 | 0 |
| reasons | 6 | 3 | 3 | 0 | 0 |
| remove-account | 1 | 0 | 1 | 0 | 1 |
| reports | 3 | 2 | 1 | 0 | 0 |
| settings | 13 | 1 | 12 | 0 | 0 |
| settlements-providers | 6 | 5 | 1 | 0 | 0 |
| settlementsProviders | 6 | 5 | 1 | 0 | 0 |
| sliders | 6 | 3 | 3 | 0 | 0 |
| sms | 2 | 1 | 1 | 0 | 0 |
| socials | 6 | 3 | 3 | 0 | 0 |
| statistics | 2 | 2 | 0 | 0 | 0 |
| subDepartments | 6 | 2 | 4 | 0 | 0 |
| subscriptions | 3 | 3 | 0 | 0 | 0 |
| supervisions | 9 | 3 | 6 | 0 | 0 |

## Page and route inventory

| Module | Sidebar group | Method | Route | Page type | Controller | View | Actions | CSRF | Permission | Images | UI quality | Risk |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| coupons | coupons | GET | `/coupons/create` | create | homeController.create | views/admin/coupons/create.ejs | create, delete, edit, mutation | module-protected | protected | no | basic | medium |
| coupons | coupons | POST | `/coupons/create` | mutation | couponController.addCoupon | — | create, delete, edit, mutation | protected | protected | no | not-applicable | low |
| coupons | coupons | POST | `/coupons/edit/:id` | mutation | couponController.editCoupon | — | create, delete, edit, mutation | protected | protected | no | not-applicable | low |
| coupons | coupons | POST | `/coupons/closeCoupon` | mutation | couponController.closeCoupon | — | create, delete, edit, mutation | protected | protected | no | not-applicable | low |
| coupons | coupons | DELETE | `/coupons/delete` | mutation | couponController.deleteCoupon | — | create, delete, edit, mutation | protected | protected | no | not-applicable | low |
| ^\ | ^\ | GET | `/^\/coupons(?:\/(?<type>[^\/]+))?$/` | index | couponController.coupons | views/admin/coupons/index.ejs<br>views/admin/coupons/dataTable.ejs | — | module-protected | protected | no | inconsistent | low |
| coupons | coupons | GET | `/coupons/:type/:id` | index | couponController.getCoupon | views/admin/coupons/index.ejs<br>views/admin/coupons/dataTable.ejs | create, delete, edit, mutation | module-protected | protected | no | inconsistent | low |
| supervisions | people | POST | `/supervisions/exportAll` | mutation | exportAll.exportAll | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| supervisions | people | GET | `/supervisions/create` | create | adminController.createAdmin | views/admin/users/supervisors/dataTable.ejs<br>views/admin/users/supervisors/index.ejs | delete, export, status-toggle, upload | module-protected | protected | no | premium | low |
| supervisions | people | POST | `/supervisions/create` | mutation | adminController.createSupervisor | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| supervisions | people | POST | `/supervisions/edit/:id` | mutation | adminController.editSuperVisor | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| supervisions | people | DELETE | `/supervisions/delete` | mutation | adminController.deleteSupervisor | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| supervisions | people | PATCH | `/supervisions/blockUnBlock` | mutation | usersController.blockUnBlock | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| supervisions | people | PATCH | `/supervisions/activateDeactivate` | mutation | usersController.activateDeactivate | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| supervisions | people | GET | `/supervisions/:type/:id` | index | adminController.getSupervisor | views/admin/users/supervisors/dataTable.ejs<br>views/admin/users/supervisors/index.ejs | delete, export, status-toggle, upload | module-protected | protected | no | premium | low |
| supervisions | people | GET | `/supervisions` | index | adminController.supervisions | views/admin/users/supervisors/dataTable.ejs<br>views/admin/users/supervisors/index.ejs | delete, export, status-toggle, upload | module-protected | protected | no | premium | low |
| subscriptions | operations-finance | GET | `/subscriptions/filter` | filter-fragment | subscriptionDashboardController.filterSubscriptions | views/admin/subscriptions/index.ejs<br>views/admin/subscriptions/dataTable.ejs<br>views/admin/subscriptions/show.ejs | — | module-protected | missing | no | basic | low |
| subscriptions | operations-finance | GET | `/subscriptions` | index | subscriptionDashboardController.index | views/admin/subscriptions/index.ejs<br>views/admin/subscriptions/dataTable.ejs<br>views/admin/subscriptions/show.ejs | — | module-protected | protected | no | basic | low |
| subscriptions | operations-finance | GET | `/subscriptions/:id` | index | subscriptionDashboardController.show | views/admin/subscriptions/show.ejs | — | module-protected | protected | no | basic | low |
| orders | operations-finance | POST | `/orders/exportAll` | mutation | exportAll.exportAll | — | export, mutation | protected | protected | no | not-applicable | low |
| orders | operations-finance | GET | `/orders/filter` | filter-fragment | orderDashboardController.ordersFilter | views/admin/orders/index.ejs | export, mutation | module-protected | missing | no | inconsistent | low |
| orders | operations-finance | GET | `/orders/chat/messages` | chat | orderDashboardController.chatMessages | views/admin/orders/index.ejs | export, mutation | module-protected | missing | no | inconsistent | low |
| orders | operations-finance | POST | `/orders/action/cancel` | mutation | orderDashboardController.cancelOrder | — | export, mutation | protected | protected | no | not-applicable | low |
| orders | operations-finance | GET | `/orders/chat/:id/show` | show | orderDashboardController.chatLayout | views/admin/orders/index.ejs | export, mutation | module-protected | protected | no | inconsistent | low |
| orders | operations-finance | GET | `/orders/show/:id` | show | orderDashboardController.orderDetails | views/admin/orders/index.ejs | export, mutation | module-protected | protected | no | inconsistent | low |
| orders | operations-finance | GET | `/orders/:type` | index | orderDashboardController.orders | views/admin/orders/index.ejs | export, mutation | module-protected | protected | no | inconsistent | low |
| orders | operations-finance | GET | `/orders` | index | res.redirect | — | export, mutation | module-protected | protected | no | broken | low |
| settlementsProviders | settlementsProviders | GET | `/settlementsProviders/filter` | filter-fragment | settlementProvidersController.settlementsFilter | views/admin/settlementsProviders/index.ejs<br>views/admin/settlementsProviders/dataTable.ejs<br>views/admin/settlementsProviders/show-details.ejs | upload | module-protected | missing | yes | premium | low |
| settlementsProviders | settlementsProviders | GET | `/settlementsProviders/show/:id` | show | settlementProvidersController.settlementDetails | views/admin/settlementsProviders/show-details.ejs | upload | module-protected | protected | yes | premium | low |
| settlementsProviders | settlementsProviders | POST | `/settlementsProviders/actions/:id` | mutation | settlementProvidersController.settlementAcceptReject | — | upload | protected | protected | no | not-applicable | low |
| settlementsProviders | settlementsProviders | GET | `/settlementsProviders/:providerType/:type` | index | settlementProvidersController.settlements | views/admin/settlementsProviders/index.ejs<br>views/admin/settlementsProviders/dataTable.ejs<br>views/admin/settlementsProviders/show-details.ejs | upload | module-protected | protected | yes | premium | low |
| settlementsProviders | settlementsProviders | GET | `/settlementsProviders/:type` | index | settlementProvidersController.settlements | views/admin/settlementsProviders/index.ejs<br>views/admin/settlementsProviders/dataTable.ejs<br>views/admin/settlementsProviders/show-details.ejs | upload | module-protected | protected | yes | premium | low |
| settlementsProviders | settlementsProviders | GET | `/settlementsProviders` | index | res.redirect | — | upload | module-protected | protected | no | broken | low |
| settlements-providers | settlements-providers | GET | `/settlements-providers/filter` | filter-fragment | settlementProvidersController.settlementsFilter | views/admin/settlementsProviders/index.ejs<br>views/admin/settlementsProviders/dataTable.ejs<br>views/admin/settlementsProviders/show-details.ejs | upload | module-protected | missing | yes | premium | low |
| settlements-providers | settlements-providers | GET | `/settlements-providers/show/:id` | show | settlementProvidersController.settlementDetails | views/admin/settlementsProviders/show-details.ejs | upload | module-protected | protected | yes | premium | low |
| settlements-providers | settlements-providers | POST | `/settlements-providers/actions/:id` | mutation | settlementProvidersController.settlementAcceptReject | — | upload | protected | protected | no | not-applicable | low |
| settlements-providers | settlements-providers | GET | `/settlements-providers/:providerType/:type` | index | settlementProvidersController.settlements | views/admin/settlementsProviders/index.ejs<br>views/admin/settlementsProviders/dataTable.ejs<br>views/admin/settlementsProviders/show-details.ejs | upload | module-protected | protected | yes | premium | low |
| settlements-providers | settlements-providers | GET | `/settlements-providers/:type` | index | settlementProvidersController.settlements | views/admin/settlementsProviders/index.ejs<br>views/admin/settlementsProviders/dataTable.ejs<br>views/admin/settlementsProviders/show-details.ejs | upload | module-protected | protected | yes | premium | low |
| settlements-providers | settlements-providers | GET | `/settlements-providers` | index | res.redirect | — | upload | module-protected | protected | no | broken | low |
| clients | people | POST | `/clients/exportAll` | mutation | exportAll.exportAll | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | GET | `/clients/create` | create | homeController.create | views/admin/users/clients/create.ejs | delete, export, mutation, status-toggle, upload | module-protected | protected | no | premium | low |
| clients | people | POST | `/clients/create` | mutation | clientController.createClient | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | GET | `/clients/mainInfo/:id` | index | clientController.getClientMainInfo | views/admin/users/clients/ratings/dataTable.ejs<br>views/admin/users/clients/ratings/index.ejs<br>views/admin/users/clients/dataTable.ejs<br>views/admin/users/clients/index.ejs | delete, export, mutation, status-toggle, upload | module-protected | missing | no | premium | low |
| clients | people | GET | `/clients/subscriptionInfo/:id` | index | clientController.getClientSubscriptionInfo | views/admin/users/clients/ratings/dataTable.ejs<br>views/admin/users/clients/ratings/index.ejs<br>views/admin/users/clients/dataTable.ejs<br>views/admin/users/clients/index.ejs | delete, export, mutation, status-toggle, upload | module-protected | missing | no | premium | low |
| clients | people | POST | `/clients/cancel-subscription` | mutation | clientController.cancelSubscription | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | POST | `/clients/upgrade-subscription` | mutation | clientController.upgradeSubscription | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | GET | `/clients/transactions/:id` | index | clientController.getClientTransactions | views/admin/users/clients/ratings/dataTable.ejs<br>views/admin/users/clients/ratings/index.ejs<br>views/admin/users/clients/dataTable.ejs<br>views/admin/users/clients/index.ejs | delete, export, mutation, status-toggle, upload | module-protected | missing | no | premium | low |
| clients | people | GET | `/clients/ratings/:id` | index | clientController.clientRatings | views/admin/users/clients/ratings/index.ejs<br>views/admin/users/clients/dataTable.ejs<br>views/admin/users/clients/index.ejs | delete, export, mutation, status-toggle, upload | module-protected | missing | no | premium | low |
| clients | people | PUT | `/clients/edit/:id` | mutation | clientController.editClient | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | POST | `/clients/sendNotify` | mutation | usersController.sendNotify | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | POST | `/clients/sendMail` | mutation | usersController.sendMail | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | POST | `/clients/sendSMS` | mutation | usersController.sendSMS | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | DELETE | `/clients/delete` | mutation | clientController.deleteClient | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | PATCH | `/clients/blockUnBlock` | mutation | clientController.blockUnBlockClient | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | PATCH | `/clients/activateDeactivate` | mutation | clientController.activateDeactivateClient | — | delete, export, mutation, status-toggle, upload | protected | protected | no | not-applicable | low |
| clients | people | GET | `/clients/:type` | index | clientController.clients | views/admin/users/clients/ratings/dataTable.ejs<br>views/admin/users/clients/ratings/index.ejs<br>views/admin/users/clients/dataTable.ejs | delete, export, mutation, status-toggle, upload | module-protected | protected | no | premium | low |
| clients | people | GET | `/clients/:type/:id` | index | clientController.getClient | views/admin/users/clients/ratings/dataTable.ejs<br>views/admin/users/clients/ratings/index.ejs<br>views/admin/users/clients/dataTable.ejs<br>views/admin/users/clients/index.ejs | delete, export, mutation, status-toggle, upload | module-protected | protected | no | premium | low |
| providersMeta | people | POST | `/providersMeta/action/:id` | mutation | providerMetaController.actionProviderMeta | — | delete, mutation | protected | protected | no | not-applicable | low |
| providersMeta | people | DELETE | `/providersMeta/delete` | mutation | providerMetaController.deleteProviderMeta | — | delete, mutation | protected | protected | no | not-applicable | low |
| providersMeta | people | GET | `/providersMeta/:type/:id` | index | providerMetaController.providerMeta | views/admin/users/providersMeta/dataTable.ejs<br>views/admin/users/providersMeta/index.ejs | delete, mutation | module-protected | protected | no | good | low |
| providersMeta | people | GET | `/providersMeta/:type` | index | providerMetaController.providersMeta | views/admin/users/providersMeta/dataTable.ejs<br>views/admin/users/providersMeta/index.ejs | delete, mutation | module-protected | protected | no | good | low |
| providers | people | GET | `/providers/ratings/:id` | index | providerController.providerRatings | views/admin/users/providers/ratings/index.ejs | delete, export, status-toggle, upload | module-protected | protected | no | inconsistent | low |
| providers | people | POST | `/providers/exportAll` | mutation | exportAll.exportAll | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| providers | people | GET | `/providers/create` | create | homeController.create | views/admin/users/providers/create.ejs | delete, export, status-toggle, upload | module-protected | protected | yes | good | low |
| providers | people | GET | `/providers/mainInfo/:id` | index | providerController.getProviderMainInfo | views/admin/users/providers/dataTable.ejs<br>views/admin/users/providers/index.ejs<br>views/admin/users/providers/ratings/dataTable.ejs<br>views/admin/users/providers/ratings/index.ejs | delete, export, status-toggle, upload | module-protected | missing | no | good | low |
| providers | people | GET | `/providers/orders/:id` | index | providerController.getProviderOrders | views/admin/users/providers/dataTable.ejs<br>views/admin/users/providers/index.ejs<br>views/admin/users/providers/ratings/dataTable.ejs<br>views/admin/users/providers/ratings/index.ejs | delete, export, status-toggle, upload | module-protected | missing | no | good | low |
| providers | people | POST | `/providers/wallet` | mutation | providerController.updateProviderWallet | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| providers | people | POST | `/providers/sendNotify` | mutation | providerController.sendProviderNotify | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| providers | people | POST | `/providers/sendMail` | mutation | providerController.sendProviderMail | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| providers | people | POST | `/providers/sendSMS` | mutation | providerController.sendProviderSMS | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| providers | people | PUT | `/providers/edit/:id` | mutation | providerController.editProvider | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| providers | people | DELETE | `/providers/delete` | mutation | providerController.deleteProvider | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| providers | people | PATCH | `/providers/blockUnBlock` | mutation | providerController.blockUnBlockProvider | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| providers | people | PATCH | `/providers/activateDeactivate` | mutation | providerController.activateDeactivateProvider | — | delete, export, status-toggle, upload | protected | protected | no | not-applicable | low |
| providers | people | GET | `/providers/:type/:id` | index | providerController.getProvider | views/admin/users/providers/dataTable.ejs<br>views/admin/users/providers/index.ejs | delete, export, status-toggle, upload | module-protected | protected | no | good | low |
| providers | people | GET | `/providers/:type` | index | providerController.providers | views/admin/users/providers/dataTable.ejs<br>views/admin/users/providers/index.ejs | delete, export, status-toggle, upload | module-protected | protected | no | good | low |
| socials | settings-governance | GET | `/socials/create` | create | socialMediaController.createSocialPage | views/admin/socials/create.ejs<br>views/admin/socials/index.ejs<br>views/admin/socials/dataTable.ejs | delete, upload | module-protected | protected | no | premium | low |
| socials | settings-governance | POST | `/socials/create` | mutation | socialMediaController.addSocial | — | delete, upload | protected | protected | no | not-applicable | low |
| socials | settings-governance | POST | `/socials/edit/:id` | mutation | socialMediaController.editSocial | — | delete, upload | protected | protected | no | not-applicable | low |
| socials | settings-governance | DELETE | `/socials/delete` | mutation | socialMediaController.deleteSocial | — | delete, upload | protected | protected | no | not-applicable | low |
| socials | settings-governance | GET | `/socials/:type/:id` | index | socialMediaController.getSocial | views/admin/socials/create.ejs<br>views/admin/socials/index.ejs<br>views/admin/socials/dataTable.ejs | delete, upload | module-protected | protected | no | premium | low |
| socials | settings-governance | GET | `/socials` | index | socialMediaController.socials | views/admin/socials/index.ejs<br>views/admin/socials/dataTable.ejs | delete, upload | module-protected | protected | no | premium | low |
| contactUs | content-support | GET | `/contactUs/filter` | filter-fragment | contactUsController.getContactsFilter | views/admin/contactUs/index.ejs<br>views/admin/contactUs/dataTable.ejs<br>views/admin/contactUs/show.ejs | delete, message | module-protected | missing | no | premium | low |
| contactUs | content-support | DELETE | `/contactUs/delete` | mutation | contactUsController.deleteContact | — | delete, message | protected | protected | no | not-applicable | low |
| contactUs | content-support | GET | `/contactUs` | index | contactUsController.getContacts | views/admin/contactUs/index.ejs<br>views/admin/contactUs/dataTable.ejs<br>views/admin/contactUs/show.ejs | delete, message | module-protected | protected | no | premium | low |
| contactUs | content-support | GET | `/contactUs/:type/:id` | index | contactUsController.getContact | views/admin/contactUs/index.ejs<br>views/admin/contactUs/dataTable.ejs<br>views/admin/contactUs/show.ejs | delete, message | module-protected | protected | no | premium | low |
| contactUs | content-support | POST | `/contactUs/send-reply` | mutation | contactUsController.sendReplyContactUs | — | delete, message | protected | protected | no | not-applicable | low |
| complaints | content-support | GET | `/complaints` | index | complaintsController.getComplaints | views/admin/complaints/index.ejs<br>views/admin/complaints/dataTable.ejs<br>views/admin/complaints/show.ejs | delete, message | module-protected | protected | yes | premium | low |
| complaints | content-support | GET | `/complaints/:type/:id` | index | complaintsController.getComplaint | views/admin/complaints/index.ejs<br>views/admin/complaints/dataTable.ejs<br>views/admin/complaints/show.ejs | delete, message | module-protected | protected | yes | premium | low |
| complaints | content-support | DELETE | `/complaints/delete` | mutation | complaintsController.deleteComplaint | — | delete, message | protected | protected | no | not-applicable | low |
| complaints | content-support | POST | `/complaints/send-reply` | mutation | complaintsController.sendReply | — | delete, message | protected | protected | no | not-applicable | low |
| sliders | sliders | GET | `/sliders/create` | create | homeController.create | views/admin/sliders/create.ejs | delete, upload | module-protected | protected | yes | premium | low |
| sliders | sliders | POST | `/sliders/create` | mutation | sliderController.addSlider | — | delete, upload | protected | protected | no | not-applicable | low |
| sliders | sliders | POST | `/sliders/edit/:id` | mutation | sliderController.editSlider | — | delete, upload | protected | protected | no | not-applicable | low |
| sliders | sliders | DELETE | `/sliders/delete` | mutation | sliderController.deleteSlider | — | delete, upload | protected | protected | no | not-applicable | low |
| sliders | sliders | GET | `/sliders/:type/:id` | index | sliderController.getSlider | views/admin/sliders/index.ejs<br>views/admin/sliders/dataTable.ejs | delete, upload | module-protected | protected | no | premium | low |
| sliders | sliders | GET | `/sliders` | index | sliderController.sliders | views/admin/sliders/index.ejs<br>views/admin/sliders/dataTable.ejs | delete, upload | module-protected | protected | no | premium | low |
| intros | intros | GET | `/intros/create` | create | homeController.create | views/admin/intros/create.ejs | delete, upload | module-protected | protected | yes | premium | low |
| intros | intros | POST | `/intros/create` | mutation | introController.addIntro | — | delete, upload | protected | protected | no | not-applicable | low |
| intros | intros | POST | `/intros/edit/:id` | mutation | introController.editIntro | — | delete, upload | protected | protected | no | not-applicable | low |
| intros | intros | DELETE | `/intros/delete` | mutation | introController.deleteIntro | — | delete, upload | protected | protected | no | not-applicable | low |
| intros | intros | GET | `/intros/:type/:id` | index | introController.getIntro | views/admin/intros/index.ejs<br>views/admin/intros/dataTable.ejs | delete, upload | module-protected | protected | no | premium | low |
| intros | intros | GET | `/intros` | index | introController.intros | views/admin/intros/index.ejs<br>views/admin/intros/dataTable.ejs | delete, upload | module-protected | protected | no | premium | low |
| fqs | content-support | GET | `/fqs/filter` | filter-fragment | fqsController.fqsFilter | views/admin/fqs/index.ejs<br>views/admin/fqs/dataTable.ejs | create, delete, edit | module-protected | missing | no | premium | low |
| fqs | content-support | GET | `/fqs/create` | create | homeController.create | views/admin/fqs/create.ejs | create, delete, edit | module-protected | protected | no | premium | low |
| fqs | content-support | POST | `/fqs/create` | mutation | fqsController.addFqs | — | create, delete, edit | protected | protected | no | not-applicable | low |
| fqs | content-support | POST | `/fqs/edit/:id` | mutation | fqsController.editFqs | — | create, delete, edit | protected | protected | no | not-applicable | low |
| fqs | content-support | DELETE | `/fqs/delete` | mutation | fqsController.deleteFqs | — | create, delete, edit | protected | protected | no | not-applicable | low |
| fqs | content-support | GET | `/fqs` | index | fqsController.fqs | views/admin/fqs/index.ejs<br>views/admin/fqs/dataTable.ejs | create, delete, edit | module-protected | protected | no | premium | low |
| fqs | content-support | GET | `/fqs/:type/:id` | index | fqsController.getFqs | views/admin/fqs/index.ejs<br>views/admin/fqs/dataTable.ejs | create, delete, edit | module-protected | protected | no | premium | low |
| payments | operations-finance | GET | `/payments/create` | create | homeController.create | views/admin/payments/create.ejs | upload | module-protected | protected | yes | premium | low |
| payments | operations-finance | POST | `/payments/create` | mutation | paymentController.addPaymentMethod | — | upload | protected | protected | no | not-applicable | low |
| payments | operations-finance | POST | `/payments/edit/:id` | mutation | paymentController.editPaymentMethod | — | upload | protected | protected | no | not-applicable | low |
| payments | operations-finance | GET | `/payments/:type/:id` | index | paymentController.getPaymentMethod | views/admin/payments/index.ejs<br>views/admin/payments/dataTable.ejs<br>views/admin/hyperBrands/index.ejs | upload | module-protected | protected | no | premium | low |
| payments | operations-finance | GET | `/payments` | index | paymentController.payments | views/admin/payments/index.ejs<br>views/admin/payments/dataTable.ejs | upload | module-protected | protected | no | premium | low |
| general-settings | settings-governance | GET | `/general-settings` | index | generalSettingsController.index | views/admin/generalSettings/index.ejs | — | module-protected | protected | no | premium | low |
| settings | settings-governance | GET | `/settings` | index | homeController.settings | views/admin/statistics/index.ejs<br>views/admin/complaints/index.ejs<br>views/admin/complaints/show.ejs | edit, upload | module-protected | protected | yes | premium | low |
| settings | settings-governance | POST | `/settings/editSiteSetting` | mutation | settingController.editSiteSetting | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editCode` | mutation | settingController.editCode | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editSmsSmtp` | mutation | settingController.editSmsSmtp | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editTerms` | mutation | settingController.editTerms | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editNotifications` | mutation | settingController.editNotifications | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editApi` | mutation | settingController.editApi | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editOpenTok` | mutation | settingController.editOpenTok | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editHyperPay` | mutation | settingController.editHyperPay | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editHomeSetting` | mutation | settingController.editHome | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editAbout` | mutation | settingController.editAbout | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editOrderSetting` | mutation | settingController.editOrderSetting | — | edit, upload | protected | protected | no | not-applicable | low |
| settings | settings-governance | POST | `/settings/editAuctionSetting` | mutation | settingController.editAuctionSetting | — | edit, upload | protected | protected | no | not-applicable | low |
| permissions | settings-governance | GET | `/permissions/create` | create | homeController.create | views/admin/permissions/create.ejs | create, delete, edit | module-protected | protected | no | premium | low |
| permissions | settings-governance | POST | `/permissions/create` | mutation | permissionController.createRole | — | create, delete, edit | protected | protected | no | not-applicable | low |
| permissions | settings-governance | POST | `/permissions/edit/:id` | mutation | permissionController.editRole | — | create, delete, edit | protected | protected | no | not-applicable | low |
| permissions | settings-governance | DELETE | `/permissions/delete` | mutation | permissionController.deleteRole | — | create, delete, edit | protected | protected | no | not-applicable | low |
| permissions | settings-governance | GET | `/permissions/filter` | filter-fragment | permissionController.filterRoles | views/admin/permissions/dataTable.ejs | create, delete, edit | module-protected | missing | no | premium | low |
| permissions | settings-governance | GET | `/permissions/:type/:id` | index | permissionController.getPermission | views/admin/permissions/index.ejs<br>views/admin/permissions/dataTable.ejs | create, delete, edit | module-protected | protected | no | premium | low |
| permissions | settings-governance | GET | `/permissions` | index | permissionController.roles | views/admin/permissions/index.ejs<br>views/admin/permissions/dataTable.ejs | create, delete, edit | module-protected | protected | no | premium | low |
| sms | sms | GET | `/sms` | index | homeController.sms | views/admin/statistics/index.ejs<br>views/admin/complaints/index.ejs<br>views/admin/complaints/show.ejs | message | module-protected | protected | yes | premium | low |
| sms | sms | POST | `/sms/changeSms` | mutation | settingController.changeSms | — | message | protected | protected | no | not-applicable | low |
| notifications | content-support | DELETE | `/notifications/delete` | mutation | notificationController.deleteNotification | — | delete, mutation | protected | protected | no | not-applicable | low |
| notifications | content-support | GET | `/notifications/index` | index | homeController.notifications | views/admin/notifications/index.ejs<br>views/admin/setting/index.ejs<br>views/admin/permissions/index.ejs<br>views/admin/permissions/dataTable.ejs<br>views/admin/sms/index.ejs | delete, mutation | module-protected | protected | no | premium | low |
| notifications | content-support | POST | `/notifications/send` | mutation | usersController.sendNotification | — | delete, mutation | protected | protected | no | not-applicable | low |
| notifications | content-support | GET | `/notifications/showNotifications` | index | notificationController.showNotifications | views/admin/notifications/showNotifications.ejs<br>views/admin/notifications/showDetails.ejs | delete, mutation | module-protected | protected | no | premium | low |
| notifications | content-support | POST | `/notifications/mark-seen` | mutation | notificationController.markNotificationsSeen | — | delete, mutation | protected | protected | no | not-applicable | low |
| notifications | content-support | GET | `/notifications/show/:id` | show | notificationController.showNotification | views/admin/notifications/showNotifications.ejs<br>views/admin/notifications/showDetails.ejs | delete, mutation | module-protected | protected | no | premium | low |
| reports | settings-governance | DELETE | `/reports/delete` | mutation | reportsController.delete | — | delete | protected | protected | no | not-applicable | low |
| reports | settings-governance | GET | `/reports/:type/:id` | index | reportsController.show | views/admin/reports/show.ejs | delete | module-protected | protected | no | good | low |
| reports | settings-governance | GET | `/reports` | index | reportsController.reports | views/admin/reports/index.ejs<br>views/admin/reports/dataTable.ejs<br>views/admin/reports/show.ejs | delete | module-protected | protected | no | good | low |
| statistics | statistics | GET | `/statistics/index` | index | homeController.getStatistics | views/admin/statistics/index.ejs<br>views/admin/complaints/index.ejs<br>views/admin/complaints/show.ejs<br>views/admin/dashboard/index.ejs | — | module-protected | protected | yes | premium | low |
| statistics | statistics | GET | `/statistics/order` | index | usersController.statistics | views/admin/users/providers/ratings/index.ejs<br>views/admin/balanceHistories/dataTable.ejs<br>views/admin/balanceHistories/index.ejs | — | module-protected | protected | no | basic | low |
| archives | archives | DELETE | `/archives/delete` | mutation | archiveController.deleteArchive | — | delete | protected | protected | no | not-applicable | low |
| archives | archives | GET | `/archives` | index | archiveController.getArchives | views/admin/archives/index.ejs<br>views/admin/archives/dataTable.ejs | delete | module-protected | protected | no | premium | low |
| infoSliders | content-support | GET | `/infoSliders/create` | create | homeController.create | views/admin/infoSite/sliders/create.ejs | delete, upload | module-protected | protected | yes | good | low |
| infoSliders | content-support | POST | `/infoSliders/create` | mutation | infoSiteController.createSlider | — | delete, upload | protected | protected | no | not-applicable | low |
| infoSliders | content-support | POST | `/infoSliders/edit/:id` | mutation | infoSiteController.editSlider | — | delete, upload | protected | protected | no | not-applicable | low |
| infoSliders | content-support | DELETE | `/infoSliders/delete` | mutation | infoSiteController.deleteSlider | — | delete, upload | protected | protected | no | not-applicable | low |
| infoSliders | content-support | GET | `/infoSliders/:type/:id` | index | infoSiteController.getSlider | views/admin/infoSite/index.ejs<br>views/admin/infoSite/contactus/show.ejs<br>views/admin/infoSite/sliders/index.ejs<br>views/admin/infoSite/sliders/dataTable.ejs<br>views/admin/infoSite/ourServices/index.ejs<br>views/admin/infoSite/ourServices/dataTable.ejs<br>views/admin/infoSite/partners/index.ejs<br>views/admin/infoSite/partners/dataTable.ejs<br>views/admin/infoSite/howWorks/index.ejs<br>views/admin/infoSite/howWorks/dataTable.ejs<br>views/admin/infoSite/contactus/index.ejs<br>views/admin/infoSite/contactus/dataTable.ejs | delete, upload | module-protected | protected | no | good | low |
| infoSliders | content-support | GET | `/infoSliders` | index | infoSiteController.infoSliders | views/admin/infoSite/index.ejs | delete, upload | module-protected | protected | no | good | low |
| infoServices | content-support | GET | `/infoServices/create` | create | homeController.create | views/admin/infoSite/ourServices/create.ejs | delete, upload | module-protected | protected | no | good | low |
| infoServices | content-support | POST | `/infoServices/create` | mutation | infoSiteController.createServices | — | delete, upload | protected | protected | no | not-applicable | high |
| infoServices | content-support | POST | `/infoServices/edit/:id` | mutation | infoSiteController.editServices | — | delete, upload | protected | protected | no | not-applicable | high |
| infoServices | content-support | DELETE | `/infoServices/delete` | mutation | infoSiteController.deleteServices | — | delete, upload | protected | protected | no | not-applicable | low |
| infoServices | content-support | GET | `/infoServices/:type/:id` | index | infoSiteController.getServices | views/admin/infoSite/index.ejs<br>views/admin/infoSite/contactus/show.ejs<br>views/admin/infoSite/sliders/index.ejs<br>views/admin/infoSite/sliders/dataTable.ejs<br>views/admin/infoSite/ourServices/index.ejs<br>views/admin/infoSite/ourServices/dataTable.ejs<br>views/admin/infoSite/partners/index.ejs<br>views/admin/infoSite/partners/dataTable.ejs<br>views/admin/infoSite/howWorks/index.ejs<br>views/admin/infoSite/howWorks/dataTable.ejs<br>views/admin/infoSite/contactus/index.ejs<br>views/admin/infoSite/contactus/dataTable.ejs | delete, upload | module-protected | protected | no | good | low |
| infoServices | content-support | GET | `/infoServices` | index | infoSiteController.infoServices | views/admin/infoSite/index.ejs<br>views/admin/infoSite/contactus/show.ejs<br>views/admin/infoSite/sliders/index.ejs<br>views/admin/infoSite/sliders/dataTable.ejs<br>views/admin/infoSite/ourServices/index.ejs<br>views/admin/infoSite/ourServices/dataTable.ejs<br>views/admin/infoSite/partners/index.ejs<br>views/admin/infoSite/partners/dataTable.ejs<br>views/admin/infoSite/howWorks/index.ejs<br>views/admin/infoSite/howWorks/dataTable.ejs<br>views/admin/infoSite/contactus/index.ejs<br>views/admin/infoSite/contactus/dataTable.ejs | delete, upload | module-protected | protected | no | good | low |
| infoPartners | content-support | GET | `/infoPartners/create` | create | homeController.create | views/admin/infoSite/partners/create.ejs | delete, upload | module-protected | protected | yes | good | low |
| infoPartners | content-support | POST | `/infoPartners/create` | mutation | infoSiteController.createPartners | — | delete, upload | protected | protected | no | not-applicable | low |
| infoPartners | content-support | POST | `/infoPartners/edit/:id` | mutation | infoSiteController.editPartners | — | delete, upload | protected | protected | no | not-applicable | low |
| infoPartners | content-support | DELETE | `/infoPartners/delete` | mutation | infoSiteController.deletePartners | — | delete, upload | protected | protected | no | not-applicable | low |
| infoPartners | content-support | GET | `/infoPartners/:type/:id` | index | infoSiteController.getPartners | views/admin/infoSite/contactus/show.ejs | delete, upload | module-protected | protected | no | basic | low |
| infoPartners | content-support | GET | `/infoPartners` | index | infoSiteController.infoPartners | views/admin/infoSite/contactus/show.ejs | delete, upload | module-protected | protected | no | basic | low |
| howWorks | content-support | GET | `/howWorks/create` | create | homeController.create | views/admin/infoSite/howWorks/create.ejs | delete, upload | module-protected | protected | yes | good | low |
| howWorks | content-support | POST | `/howWorks/create` | mutation | infoSiteController.createHowWork | — | delete, upload | protected | protected | no | not-applicable | low |
| howWorks | content-support | POST | `/howWorks/edit/:id` | mutation | infoSiteController.editHowWork | — | delete, upload | protected | protected | no | not-applicable | low |
| howWorks | content-support | DELETE | `/howWorks/delete` | mutation | infoSiteController.deleteHowWork | — | delete, upload | protected | protected | no | not-applicable | low |
| howWorks | content-support | GET | `/howWorks/:type/:id` | index | infoSiteController.getHowWork | views/admin/infoSite/sliders/index.ejs<br>views/admin/infoSite/sliders/dataTable.ejs | delete, upload | module-protected | protected | no | good | low |
| howWorks | content-support | GET | `/howWorks` | index | infoSiteController.howWorks | views/admin/infoSite/index.ejs<br>views/admin/infoSite/contactus/show.ejs<br>views/admin/infoSite/sliders/index.ejs<br>views/admin/infoSite/sliders/dataTable.ejs<br>views/admin/infoSite/ourServices/index.ejs<br>views/admin/infoSite/ourServices/dataTable.ejs<br>views/admin/infoSite/partners/index.ejs<br>views/admin/infoSite/partners/dataTable.ejs<br>views/admin/infoSite/howWorks/index.ejs<br>views/admin/infoSite/howWorks/dataTable.ejs<br>views/admin/infoSite/contactus/index.ejs<br>views/admin/infoSite/contactus/dataTable.ejs | delete, upload | module-protected | protected | no | good | low |
| infoMessages | content-support | DELETE | `/infoMessages/delete` | mutation | infoSiteController.deleteMessage | — | delete, message | protected | protected | no | not-applicable | low |
| infoMessages | content-support | POST | `/infoMessages/contactUs/send-reply` | mutation | infoSiteController.sendReply | — | delete, message | protected | protected | no | not-applicable | low |
| infoMessages | content-support | GET | `/infoMessages/:type/:id` | index | infoSiteController.getMessage | views/admin/infoSite/contactus/show.ejs | delete, message | module-protected | protected | no | basic | low |
| infoMessages | content-support | GET | `/infoMessages` | index | infoSiteController.infoMessages | views/admin/infoSite/index.ejs<br>views/admin/infoSite/contactus/show.ejs<br>views/admin/infoSite/sliders/index.ejs<br>views/admin/infoSite/sliders/dataTable.ejs<br>views/admin/infoSite/ourServices/index.ejs<br>views/admin/infoSite/ourServices/dataTable.ejs<br>views/admin/infoSite/partners/index.ejs<br>views/admin/infoSite/partners/dataTable.ejs<br>views/admin/infoSite/howWorks/index.ejs<br>views/admin/infoSite/howWorks/dataTable.ejs<br>views/admin/infoSite/contactus/index.ejs<br>views/admin/infoSite/contactus/dataTable.ejs | delete, message | module-protected | protected | no | good | low |
| infoSettings | content-support | GET | `/infoSettings` | index | infoSiteController.infoSettings | views/admin/infoSite/index.ejs | upload | module-protected | protected | no | good | low |
| infoSettings | content-support | POST | `/infoSettings/edit` | mutation | infoSiteController.editSiteSetting | — | upload | protected | protected | no | not-applicable | low |
| reasons | settings-governance | GET | `/reasons/create` | create | homeController.create | views/admin/reasons/create.ejs | create, delete, edit | module-protected | protected | no | premium | low |
| reasons | settings-governance | POST | `/reasons/create` | mutation | reasonsController.addReason | — | create, delete, edit | protected | protected | no | not-applicable | low |
| reasons | settings-governance | POST | `/reasons/edit/:id` | mutation | reasonsController.editReason | — | create, delete, edit | protected | protected | no | not-applicable | low |
| reasons | settings-governance | DELETE | `/reasons/delete` | mutation | reasonsController.deleteReason | — | create, delete, edit | protected | protected | no | not-applicable | low |
| reasons | settings-governance | GET | `/reasons/:type/:id` | index | reasonsController.getReason | views/admin/reasons/index.ejs<br>views/admin/reasons/dataTable.ejs | create, delete, edit | module-protected | protected | no | premium | low |
| reasons | settings-governance | GET | `/reasons` | index | reasonsController.reasons | views/admin/reasons/index.ejs<br>views/admin/reasons/dataTable.ejs | create, delete, edit | module-protected | protected | no | premium | low |
| departments | catalog | GET | `/departments/create` | create | homeController.create | views/admin/departments/create.ejs | delete, mutation, upload | module-protected | protected | yes | basic | low |
| departments | catalog | POST | `/departments/create` | mutation | departmentsController.addDepartment | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| departments | catalog | POST | `/departments/edit/:id` | mutation | departmentsController.editDepartment | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| departments | catalog | DELETE | `/departments/delete` | mutation | departmentsController.deleteDepartment | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| departments | catalog | PATCH | `/departments/showHide/:id` | mutation | departmentsController.showHide | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| departments | catalog | GET | `/departments/subDepartments/:id` | index | subDepartmentsController.getSubDepartments | views/admin/subDepartments/index.ejs<br>views/admin/subDepartments/dataTable.ejs | delete, mutation, upload | module-protected | protected | no | inconsistent | low |
| departments | catalog | GET | `/departments/:type/:id` | index | departmentsController.getDepartment | views/admin/departments/index.ejs<br>views/admin/departments/dataTable.ejs | delete, mutation, upload | module-protected | protected | no | inconsistent | low |
| ^\ | ^\ | GET | `/^\/departments(?:\/(?<type>[^\/]+))?$/` | index | departmentsController.getDepartments | views/admin/departments/index.ejs<br>views/admin/departments/dataTable.ejs | — | module-protected | protected | no | inconsistent | low |
| subDepartments | catalog | GET | `/subDepartments/create` | create | homeController.create | views/admin/subDepartments/create.ejs | delete, mutation, upload | module-protected | protected | no | basic | low |
| subDepartments | catalog | POST | `/subDepartments/create` | mutation | subDepartmentsController.addSubDepartment | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| subDepartments | catalog | POST | `/subDepartments/edit/:id` | mutation | subDepartmentsController.editSubDepartment | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| subDepartments | catalog | DELETE | `/subDepartments/delete` | mutation | subDepartmentsController.deleteSubDepartment | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| subDepartments | catalog | PATCH | `/subDepartments/showHide/:id` | mutation | subDepartmentsController.showHide | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| subDepartments | catalog | GET | `/subDepartments/:type/:id` | index | subDepartmentsController.getSubDepartment | views/admin/subDepartments/index.ejs<br>views/admin/subDepartments/dataTable.ejs | delete, mutation, upload | module-protected | protected | no | inconsistent | low |
| ^\ | ^\ | GET | `/^\/subDepartments(?:\/(?<type>[^\/]+))?$/` | index | subDepartmentsController.getSubDepartments | views/admin/subDepartments/index.ejs<br>views/admin/subDepartments/dataTable.ejs | — | module-protected | protected | no | inconsistent | low |
| attributes | catalog | GET | `/attributes/create` | create | attributesController.create | views/admin/attributeValues/dataTable.ejs<br>views/admin/attributeValues/index.ejs<br>views/admin/attributes/index.ejs<br>views/admin/attributes/dataTable.ejs<br>views/admin/attributes/create.ejs | create, delete, edit, mutation, status-toggle | module-protected | protected | no | basic | low |
| attributes | catalog | POST | `/attributes/create` | mutation | attributesController.addAttribute | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | POST | `/attributes/edit/:id` | mutation | attributesController.editAttribute | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | DELETE | `/attributes/delete` | mutation | attributesController.deleteAttribute | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | PATCH | `/attributes/toggleStatus/:id` | mutation | attributesController.toggleStatus | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | GET | `/attributes/colors/create` | create | attributesController.createColor | views/admin/attributeValues/dataTable.ejs<br>views/admin/attributeValues/index.ejs<br>views/admin/attributes/index.ejs<br>views/admin/attributes/dataTable.ejs<br>views/admin/attributes/create.ejs | create, delete, edit, mutation, status-toggle | module-protected | protected | no | basic | low |
| attributes | catalog | POST | `/attributes/colors/create` | mutation | attributesController.addColor | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | GET | `/attributes/colors/edit/:id` | edit | attributesController.editColorForm | views/admin/attributeValues/dataTable.ejs<br>views/admin/attributeValues/index.ejs<br>views/admin/attributes/index.ejs<br>views/admin/attributes/dataTable.ejs<br>views/admin/attributes/create.ejs | create, delete, edit, mutation, status-toggle | module-protected | protected | no | basic | low |
| attributes | catalog | POST | `/attributes/colors/edit/:id` | mutation | attributesController.editColor | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | DELETE | `/attributes/colors/delete` | mutation | attributesController.deleteColor | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | PATCH | `/attributes/colors/showHide/:id` | mutation | attributesController.toggleColorStatus | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | GET | `/attributes/colors` | index | attributesController.getColors | views/admin/attributeValues/dataTable.ejs<br>views/admin/attributeValues/index.ejs<br>views/admin/attributes/index.ejs<br>views/admin/attributes/dataTable.ejs<br>views/admin/attributes/create.ejs | create, delete, edit, mutation, status-toggle | module-protected | protected | no | basic | low |
| attributes | catalog | GET | `/attributes/sizes/create` | create | attributesController.createSize | views/admin/attributeValues/dataTable.ejs<br>views/admin/attributeValues/index.ejs<br>views/admin/attributes/index.ejs<br>views/admin/attributes/dataTable.ejs<br>views/admin/attributes/create.ejs | create, delete, edit, mutation, status-toggle | module-protected | protected | no | basic | low |
| attributes | catalog | POST | `/attributes/sizes/create` | mutation | attributesController.addSize | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | GET | `/attributes/sizes/edit/:id` | edit | attributesController.editSizeForm | views/admin/attributeValues/dataTable.ejs<br>views/admin/attributeValues/index.ejs<br>views/admin/attributes/index.ejs<br>views/admin/attributes/dataTable.ejs<br>views/admin/attributes/create.ejs | create, delete, edit, mutation, status-toggle | module-protected | protected | no | basic | low |
| attributes | catalog | POST | `/attributes/sizes/edit/:id` | mutation | attributesController.editSize | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | DELETE | `/attributes/sizes/delete` | mutation | attributesController.deleteSize | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | PATCH | `/attributes/sizes/showHide/:id` | mutation | attributesController.toggleSizeStatus | — | create, delete, edit, mutation, status-toggle | protected | protected | no | not-applicable | low |
| attributes | catalog | GET | `/attributes/sizes` | index | attributesController.getSizes | views/admin/attributeValues/dataTable.ejs<br>views/admin/attributeValues/index.ejs<br>views/admin/attributes/index.ejs<br>views/admin/attributes/dataTable.ejs<br>views/admin/attributes/create.ejs | create, delete, edit, mutation, status-toggle | module-protected | protected | no | basic | low |
| attributes | catalog | GET | `/attributes/:type/:id` | index | attributesController.getAttribute | views/admin/attributes/index.ejs<br>views/admin/attributes/dataTable.ejs<br>views/admin/attributes/create.ejs | create, delete, edit, mutation, status-toggle | module-protected | protected | no | basic | low |
| attributes | catalog | GET | `/attributes` | index | attributesController.getAttributes | views/admin/attributes/index.ejs<br>views/admin/attributes/dataTable.ejs<br>views/admin/attributes/create.ejs | create, delete, edit, mutation, status-toggle | module-protected | protected | no | basic | low |
| packages | packages | GET | `/packages/create` | create | homeController.create | views/admin/packages/create.ejs | create, delete, edit | module-protected | protected | no | basic | low |
| packages | packages | GET | `/packages` | index | packageController.packages | views/admin/packages/index.ejs<br>views/admin/packages/dataTable.ejs | create, delete, edit | module-protected | protected | no | inconsistent | low |
| packages | packages | POST | `/packages/create` | mutation | packageController.addPackage | — | create, delete, edit | protected | protected | no | not-applicable | low |
| packages | packages | GET | `/packages/:type/:id` | index | packageController.getPackage | views/admin/packages/index.ejs<br>views/admin/packages/dataTable.ejs | create, delete, edit | module-protected | protected | no | inconsistent | low |
| packages | packages | POST | `/packages/edit/:id` | mutation | packageController.editPackage | — | create, delete, edit | protected | protected | no | not-applicable | low |
| packages | packages | DELETE | `/packages/delete` | mutation | packageController.deletePackage | — | create, delete, edit | protected | protected | no | not-applicable | low |
| packageFeatures | packageFeatures | GET | `/packageFeatures/create` | create | homeController.create | views/admin/packageFeatures/create.ejs | create, delete, edit | module-protected | protected | no | inconsistent | low |
| packageFeatures | packageFeatures | GET | `/packageFeatures` | index | packageFeatureController.index | views/admin/packageFeatures/index.ejs<br>views/admin/packageFeatures/dataTable.ejs | create, delete, edit | module-protected | protected | no | inconsistent | low |
| packageFeatures | packageFeatures | POST | `/packageFeatures/create` | mutation | packageFeatureController.add | — | create, delete, edit | protected | protected | no | not-applicable | low |
| packageFeatures | packageFeatures | GET | `/packageFeatures/:type/:id` | index | packageFeatureController.getOne | views/admin/packageFeatures/index.ejs<br>views/admin/packageFeatures/dataTable.ejs | create, delete, edit | module-protected | protected | no | inconsistent | low |
| packageFeatures | packageFeatures | POST | `/packageFeatures/edit/:id` | mutation | packageFeatureController.edit | — | create, delete, edit | protected | protected | no | not-applicable | low |
| packageFeatures | packageFeatures | DELETE | `/packageFeatures/delete` | mutation | packageFeatureController.delete | — | create, delete, edit | protected | protected | no | not-applicable | low |
| premiumPackages | premiumPackages | GET | `/premiumPackages/create` | create | homeController.create | views/admin/premiumPackages/create.ejs | create, delete, edit | module-protected | protected | no | basic | low |
| premiumPackages | premiumPackages | GET | `/premiumPackages` | index | premiumPackageController.index | views/admin/premiumPackages/index.ejs<br>views/admin/premiumPackages/dataTable.ejs | create, delete, edit | module-protected | protected | no | inconsistent | low |
| premiumPackages | premiumPackages | POST | `/premiumPackages/create` | mutation | premiumPackageController.add | — | create, delete, edit | protected | protected | no | not-applicable | low |
| premiumPackages | premiumPackages | GET | `/premiumPackages/:type/:id` | index | premiumPackageController.getOne | views/admin/premiumPackages/index.ejs<br>views/admin/premiumPackages/dataTable.ejs | create, delete, edit | module-protected | protected | no | inconsistent | low |
| premiumPackages | premiumPackages | POST | `/premiumPackages/edit/:id` | mutation | premiumPackageController.edit | — | create, delete, edit | protected | protected | no | not-applicable | low |
| premiumPackages | premiumPackages | DELETE | `/premiumPackages/delete` | mutation | premiumPackageController.delete | — | create, delete, edit | protected | protected | no | not-applicable | low |
| countries | catalog | POST | `/countries/exportAll` | mutation | exportAll.exportAll | — | delete, export, mutation, upload | protected | protected | no | not-applicable | low |
| countries | catalog | GET | `/countries/create` | create | homeController.create | views/admin/countries/create.ejs | delete, export, mutation, upload | module-protected | protected | yes | basic | low |
| countries | catalog | POST | `/countries/create` | mutation | countryController.addCountry | — | delete, export, mutation, upload | protected | protected | no | not-applicable | low |
| countries | catalog | POST | `/countries/edit/:id` | mutation | countryController.editCountry | — | delete, export, mutation, upload | protected | protected | no | not-applicable | low |
| countries | catalog | DELETE | `/countries/delete` | mutation | countryController.deleteCountry | — | delete, export, mutation, upload | protected | protected | no | not-applicable | low |
| countries | catalog | PATCH | `/countries/showHiddenCountry/:id` | mutation | countryController.showHiddenCountry | — | delete, export, mutation, upload | protected | protected | no | not-applicable | low |
| countries | catalog | GET | `/countries` | index | countryController.countries | views/admin/countries/dataTable.ejs<br>views/admin/countries/index.ejs | delete, export, mutation, upload | module-protected | protected | no | inconsistent | low |
| countries | catalog | GET | `/countries/:type` | index | countryController.countries | views/admin/countries/dataTable.ejs<br>views/admin/countries/index.ejs | delete, export, mutation, upload | module-protected | protected | no | inconsistent | low |
| countries | catalog | GET | `/countries/:type/:id` | index | countryController.getCountry | views/admin/countries/dataTable.ejs<br>views/admin/countries/index.ejs | delete, export, mutation, upload | module-protected | protected | no | inconsistent | low |
| cities | catalog | POST | `/cities/exportAll` | mutation | exportAll.exportAll | — | delete, edit, export, mutation, upload | protected | protected | no | not-applicable | low |
| cities | catalog | GET | `/cities/create` | create | homeController.create | views/admin/cities/create.ejs | delete, edit, export, mutation, upload | module-protected | protected | no | premium | low |
| cities | catalog | POST | `/cities/create` | mutation | cityController.addCity | — | delete, edit, export, mutation, upload | protected | protected | no | not-applicable | low |
| cities | catalog | POST | `/cities/edit/:id` | mutation | cityController.editCity | — | delete, edit, export, mutation, upload | protected | protected | no | not-applicable | low |
| cities | catalog | DELETE | `/cities/delete` | mutation | cityController.deleteCity | — | delete, edit, export, mutation, upload | protected | protected | no | not-applicable | low |
| cities | catalog | PATCH | `/cities/showHideCity/:id` | mutation | cityController.showHideCity | — | delete, edit, export, mutation, upload | protected | protected | no | not-applicable | low |
| cities | catalog | GET | `/cities/countryCode` | index | homeController.fetchCitiesByCountryCode | views/admin/statistics/index.ejs<br>views/admin/complaints/index.ejs<br>views/admin/complaints/show.ejs | delete, edit, export, mutation, upload | module-protected | missing | yes | premium | low |
| cities | catalog | GET | `/cities/villages` | index | homeController.fetchVillagesByCityId | views/admin/statistics/index.ejs<br>views/admin/complaints/index.ejs<br>views/admin/complaints/show.ejs | delete, edit, export, mutation, upload | module-protected | missing | yes | premium | low |
| cities | catalog | GET | `/cities` | index | cityController.cities | views/admin/cities/index.ejs<br>views/admin/cities/dataTable.ejs | delete, edit, export, mutation, upload | module-protected | protected | no | inconsistent | low |
| cities | catalog | GET | `/cities/:type` | index | cityController.cities | views/admin/cities/index.ejs<br>views/admin/cities/dataTable.ejs | delete, edit, export, mutation, upload | module-protected | protected | no | inconsistent | low |
| cities | catalog | GET | `/cities/:type/:id` | index | cityController.getCity | views/admin/cities/index.ejs<br>views/admin/cities/dataTable.ejs | delete, edit, export, mutation, upload | module-protected | protected | no | inconsistent | low |
| auctions | marketplace | POST | `/auctions/exportAll` | mutation | exportAll.exportAll | — | approve, delete, export, mutation, reject, upload | protected | protected | no | not-applicable | low |
| auctions | marketplace | GET | `/auctions/filter` | filter-fragment | auctionDashboardController.auctionsFilter | views/admin/auctions/index.ejs<br>views/admin/auctions/chat.ejs | approve, delete, export, mutation, reject, upload | module-protected | missing | yes | premium | low |
| ^\ | ^\ | GET | `/^\/auctions(?:\/(?<type>[^\/]+))?$/` | index | auctionDashboardController.auctions | views/admin/auctions/index.ejs | — | module-protected | protected | no | premium | low |
| auctions | marketplace | GET | `/auctions/show/:id` | show | auctionDashboardController.getAuction | views/admin/auctions/index.ejs<br>views/admin/auctions/chat.ejs | approve, delete, export, mutation, reject, upload | module-protected | protected | yes | premium | low |
| auctions | marketplace | GET | `/auctions/chat/messages` | chat | auctionDashboardController.getAuctionChatMessages | views/admin/auctions/index.ejs<br>views/admin/auctions/chat.ejs | approve, delete, export, mutation, reject, upload | module-protected | missing | yes | premium | low |
| auctions | marketplace | GET | `/auctions/chat/:id` | chat | auctionDashboardController.getAuctionChat | views/admin/auctions/chat.ejs | approve, delete, export, mutation, reject, upload | module-protected | protected | yes | premium | low |
| auctions | marketplace | POST | `/auctions/action/approve` | mutation | auctionDashboardController.approveAuction | — | approve, delete, export, mutation, reject, upload | protected | protected | no | not-applicable | low |
| auctions | marketplace | POST | `/auctions/action/reject` | mutation | auctionDashboardController.rejectAuction | — | approve, delete, export, mutation, reject, upload | protected | protected | no | not-applicable | low |
| auctions | marketplace | POST | `/auctions/action/request-changes` | mutation | auctionDashboardController.requestChangesAuction | — | approve, delete, export, mutation, reject, upload | protected | protected | no | not-applicable | low |
| auctions | marketplace | POST | `/auctions/action/cancel` | mutation | auctionDashboardController.cancelAuction | — | approve, delete, export, mutation, reject, upload | protected | protected | no | not-applicable | low |
| auctions | marketplace | POST | `/auctions/action/update` | mutation | auctionDashboardController.updateAuction | — | approve, delete, export, mutation, reject, upload | protected | protected | no | not-applicable | low |
| auctions | marketplace | POST | `/auctions/action/resolve-held-deposit` | mutation | auctionDashboardController.resolveHeldDeposit | — | approve, delete, export, mutation, reject, upload | protected | protected | no | not-applicable | low |
| auctions | marketplace | DELETE | `/auctions/delete` | mutation | auctionDashboardController.deleteAuction | — | approve, delete, export, mutation, reject, upload | protected | protected | no | not-applicable | low |
| advertisements | marketplace | GET | `/advertisements/editRequests` | index | advertisementController.getEditRequests | views/admin/advertisements/editRequests/index.ejs<br>views/admin/advertisements/editRequests/show.ejs | approve, delete, mutation, reject | module-protected | protected | yes | good | low |
| advertisements | marketplace | GET | `/advertisements/editRequests/show/:id` | show | advertisementController.showEditRequest | views/admin/advertisements/editRequests/show.ejs | approve, delete, mutation, reject | module-protected | protected | yes | basic | low |
| advertisements | marketplace | PATCH | `/advertisements/editRequests/approve/:id` | mutation | advertisementController.approveEditRequest | — | approve, delete, mutation, reject | protected | protected | no | not-applicable | low |
| advertisements | marketplace | PATCH | `/advertisements/editRequests/reject/:id` | mutation | advertisementController.rejectEditRequest | — | approve, delete, mutation, reject | protected | protected | no | not-applicable | low |
| advertisements | marketplace | GET | `/advertisements/filter` | filter-fragment | advertisementController.filterAdvertisements | views/admin/advertisements/index.ejs<br>views/admin/advertisements/dataTable.ejs<br>views/admin/advertisements/show.ejs | approve, delete, mutation, reject | module-protected | missing | yes | good | low |
| advertisements | marketplace | GET | `/advertisements/show/:id` | show | advertisementController.getAdvertisement | views/admin/advertisements/show.ejs<br>views/admin/advertisements/editRequests/index.ejs<br>views/admin/advertisements/editRequests/show.ejs | approve, delete, mutation, reject | module-protected | protected | yes | good | low |
| advertisements | marketplace | PATCH | `/advertisements/approve/:id` | mutation | advertisementController.approveAdvertisement | — | approve, delete, mutation, reject | protected | protected | no | not-applicable | low |
| advertisements | marketplace | PATCH | `/advertisements/reject/:id` | mutation | advertisementController.rejectAdvertisement | — | approve, delete, mutation, reject | protected | protected | no | not-applicable | low |
| advertisements | marketplace | PATCH | `/advertisements/setCommission/:id` | mutation | advertisementController.setCommission | — | approve, delete, mutation, reject | protected | protected | no | not-applicable | low |
| advertisements | marketplace | PATCH | `/advertisements/approveGold/:id` | mutation | advertisementController.approveGold | — | approve, delete, mutation, reject | protected | protected | no | not-applicable | low |
| advertisements | marketplace | PATCH | `/advertisements/rejectGold/:id` | mutation | advertisementController.rejectGold | — | approve, delete, mutation, reject | protected | protected | no | not-applicable | low |
| advertisements | marketplace | DELETE | `/advertisements/delete` | mutation | advertisementController.deleteAdvertisement | — | approve, delete, mutation, reject | protected | protected | no | not-applicable | low |
| advertisements | marketplace | GET | `/advertisements/:type` | index | advertisementController.advertisements | views/admin/advertisements/index.ejs<br>views/admin/advertisements/dataTable.ejs<br>views/admin/advertisements/show.ejs | approve, delete, mutation, reject | module-protected | protected | yes | good | low |
| products | marketplace | GET | `/products/filter` | filter-fragment | productDashboardController.filterProducts | views/admin/products/dataTable.ejs<br>views/admin/products/show.ejs<br>views/admin/products/create.ejs<br>views/admin/products/edit.ejs | approve, delete, mutation, reject, upload | module-protected | missing | yes | good | low |
| products | marketplace | GET | `/products` | index | productDashboardController.products | views/admin/products/index.ejs<br>views/admin/products/dataTable.ejs<br>views/admin/products/show.ejs<br>views/admin/products/create.ejs | approve, delete, mutation, reject, upload | module-protected | protected | yes | good | low |
| products | marketplace | GET | `/products/show/:id` | show | productDashboardController.showProduct | views/admin/products/show.ejs<br>views/admin/products/create.ejs<br>views/admin/products/edit.ejs | approve, delete, mutation, reject, upload | module-protected | protected | yes | good | low |
| products | marketplace | GET | `/products/edit/:id` | edit | productDashboardController.editProductPage | views/admin/products/edit.ejs | approve, delete, mutation, reject, upload | module-protected | protected | no | inconsistent | low |
| products | marketplace | PUT | `/products/edit/:id` | mutation | productDashboardController.editProduct | — | approve, delete, mutation, reject, upload | protected | protected | no | not-applicable | low |
| products | marketplace | DELETE | `/products/delete` | mutation | productDashboardController.deleteProduct | — | approve, delete, mutation, reject, upload | protected | protected | no | not-applicable | low |
| products | marketplace | PATCH | `/products/moderation/approve/:id` | mutation | productDashboardController.approveProduct | — | approve, delete, mutation, reject, upload | protected | protected | no | not-applicable | low |
| products | marketplace | PATCH | `/products/moderation/reject/:id` | mutation | productDashboardController.rejectProduct | — | approve, delete, mutation, reject, upload | protected | protected | no | not-applicable | low |
| products | marketplace | PATCH | `/products/visibility/:id` | mutation | productDashboardController.setProductVisibility | — | approve, delete, mutation, reject, upload | protected | protected | no | not-applicable | low |
| products | marketplace | PATCH | `/products/moderation/bulk` | mutation | productDashboardController.bulkModerateProducts | — | approve, delete, mutation, reject, upload | protected | protected | no | not-applicable | low |
| product-report-reasons | product-report-reasons | GET | `/product-report-reasons/filter` | filter-fragment | productReportsController.filterReasons | views/admin/productReportReasons/create.ejs<br>views/admin/productReports/index.ejs<br>views/admin/productReports/show.ejs | delete, mutation, upload | module-protected | missing | yes | premium | low |
| product-report-reasons | product-report-reasons | GET | `/product-report-reasons/create` | create | productReportsController.createReasonPage | views/admin/productReportReasons/create.ejs<br>views/admin/productReports/index.ejs<br>views/admin/productReports/show.ejs | delete, mutation, upload | module-protected | protected | yes | premium | low |
| product-report-reasons | product-report-reasons | POST | `/product-report-reasons/create` | mutation | productReportsController.createReason | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| product-report-reasons | product-report-reasons | GET | `/product-report-reasons/show/:id` | show | productReportsController.showReason | views/admin/productReports/index.ejs<br>views/admin/productReports/show.ejs | delete, mutation, upload | module-protected | protected | yes | premium | low |
| product-report-reasons | product-report-reasons | GET | `/product-report-reasons/edit/:id` | edit | productReportsController.editReasonPage | views/admin/productReports/index.ejs<br>views/admin/productReports/show.ejs | delete, mutation, upload | module-protected | protected | yes | premium | low |
| product-report-reasons | product-report-reasons | POST | `/product-report-reasons/edit/:id` | mutation | productReportsController.updateReason | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| product-report-reasons | product-report-reasons | PATCH | `/product-report-reasons/visibility/:id` | mutation | productReportsController.setReasonVisibility | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| product-report-reasons | product-report-reasons | DELETE | `/product-report-reasons/delete` | mutation | productReportsController.deleteReasons | — | delete, mutation, upload | protected | protected | no | not-applicable | low |
| product-report-reasons | product-report-reasons | GET | `/product-report-reasons` | index | productReportsController.reasons | views/admin/productReportReasons/dataTable.ejs<br>views/admin/productReports/dataTable.ejs<br>views/admin/productReportReasons/index.ejs<br>views/admin/productReportReasons/create.ejs | delete, mutation, upload | module-protected | protected | no | premium | low |
| product-reports | product-reports | GET | `/product-reports/filter` | filter-fragment | productReportsController.filterReports | views/admin/productReports/show.ejs | status-toggle | module-protected | missing | yes | premium | low |
| product-reports | product-reports | GET | `/product-reports/show/:id` | show | productReportsController.showReport | views/admin/productReports/show.ejs | status-toggle | module-protected | protected | yes | premium | low |
| product-reports | product-reports | PATCH | `/product-reports/status/:id` | mutation | productReportsController.updateReportStatus | — | status-toggle | protected | protected | no | not-applicable | low |
| product-reports | product-reports | GET | `/product-reports` | index | productReportsController.reports | views/admin/productReportReasons/dataTable.ejs<br>views/admin/productReports/dataTable.ejs<br>views/admin/productReportReasons/index.ejs<br>views/admin/productReportReasons/create.ejs | status-toggle | module-protected | protected | no | premium | low |
| products | marketplace | GET | `/products/goldRequests/filter` | filter-fragment | productDashboardController.filterGoldRequests | views/admin/productsGold/index.ejs<br>views/admin/productsGold/dataTable.ejs<br>views/admin/productsGold/show.ejs | approve, delete, mutation, reject, upload | module-protected | missing | yes | basic | low |
| products | marketplace | GET | `/products/goldRequests` | index | productDashboardController.goldRequests | views/admin/productsGold/index.ejs<br>views/admin/productsGold/dataTable.ejs<br>views/admin/productsGold/show.ejs | approve, delete, mutation, reject, upload | module-protected | protected | yes | basic | low |
| products | marketplace | GET | `/products/goldRequests/show/:id` | show | productDashboardController.showGoldProduct | views/admin/productsGold/show.ejs | approve, delete, mutation, reject, upload | module-protected | protected | yes | basic | low |
| products | marketplace | PATCH | `/products/goldRequests/approve/:id` | mutation | productDashboardController.approveGold | — | approve, delete, mutation, reject, upload | protected | protected | no | not-applicable | low |
| products | marketplace | PATCH | `/products/goldRequests/reject/:id` | mutation | productDashboardController.rejectGold | — | approve, delete, mutation, reject, upload | protected | protected | no | not-applicable | low |
| products | marketplace | PATCH | `/products/goldRequests/rate/:id` | mutation | productDashboardController.rateGoldProduct | — | approve, delete, mutation, reject, upload | protected | protected | no | not-applicable | low |
| profits | operations-finance | GET | `/profits` | index | profitController.profits | views/admin/profits/index.ejs<br>views/admin/profits/dataTable.ejs | delete | module-protected | protected | no | premium | low |
| profits | operations-finance | GET | `/profits/show/:id` | show | profitController.getProfit | views/admin/profits/index.ejs<br>views/admin/profits/dataTable.ejs | delete | module-protected | protected | no | premium | low |
| profits | operations-finance | DELETE | `/profits/delete` | mutation | profitController.deleteProfit | — | delete | protected | protected | no | not-applicable | low |
| login | login | GET | `/login` | index | authController.login | views/admin/auth/auth-login.ejs | mutation | module-protected | missing | no | good | low |
| login | login | POST | `/login` | mutation | authController.loginIn | — | mutation | protected | missing | no | not-applicable | low |
| changePassword | changePassword | POST | `/changePassword` | mutation | adminController.changePassword | — | mutation | protected | missing | no | not-applicable | low |
| profile | profile | GET | `/profile/:id` | show | adminController.getSupervisorProfile | views/admin/users/supervisors/dataTable.ejs<br>views/admin/users/supervisors/index.ejs | — | module-protected | missing | no | premium | low |
| logout | logout | DELETE | `/logout` | mutation | authController.logout | — | mutation | protected | missing | no | not-applicable | low |
| remove-account | remove-account | POST | `/remove-account` | mutation | infoSiteController.removeAccount | — | delete | protected | missing | no | not-applicable | low |
| changeThem | changeThem | GET | `/changeThem/:theme` | index | usersController.changeThem | views/admin/users/providers/ratings/index.ejs<br>views/admin/balanceHistories/dataTable.ejs<br>views/admin/balanceHistories/index.ejs | — | module-protected | missing | no | basic | low |
| ^\ | ^\ | GET | `/^\/changeLanguage(?:\/(?<type>[^\/]+))?$/` | index | homeController.changeLanguage | views/admin/statistics/index.ejs<br>views/admin/complaints/index.ejs<br>views/admin/complaints/show.ejs<br>views/admin/dashboard/index.ejs | — | module-protected | missing | yes | premium | low |
| changeLanguagePublic | changeLanguagePublic | GET | `/changeLanguagePublic/:lang` | index | res.redirect | — | — | module-protected | missing | no | broken | low |
| index | index | GET | `/index` | index | homeController.dashboard | views/admin/statistics/index.ejs<br>views/admin/complaints/index.ejs<br>views/admin/complaints/show.ejs | — | module-protected | missing | yes | premium | low |
| index | index | GET | `/index/unAuthorized` | index | homeController.unAuthorized | views/admin/505Page/error-505.ejs.ejs | — | module-protected | missing | no | inconsistent | low |

## Blocking contract findings

### Missing CSRF


### Missing AJAX permission middleware


### Native dialog calls


