Sales agents

IP5 Agency — Sales Agents: personal access module for CS-Cart

If you have several sales managers working with different customers, this module gives each of them a personal workspace: only their own customers, only their orders and abandoned carts — with no access to other managers’ data and no risk of accidentally (or intentionally) viewing or changing someone else’s order. The main administrator keeps full control: assigns customers manually or lets buyers choose their sales agent during registration.

Why you need it

Stock CS-Cart does not distinguish “my” and “someone else’s” customers for administrators — any employee with access to the Orders section sees every order in the store. With several sales managers this is either inconvenient (everyone scrolls through hundreds of unrelated orders) or insecure (a manager can see contacts and purchase amounts of colleagues’ clients). The module solves this at the SQL and permission level, not by simply hiding buttons in the interface.

How it works — in short

1. The main administrator creates an administrator user group (e.g. “Sales”) and adds employees to it.
2. In the module settings the administrator selects this group and, if needed, enables the sales agent selector on registration.
3. Customers are assigned to managers — either manually by the administrator or by the customer choosing an agent during registration.
4. When a manager logs in, they see only their own dashboard, their customers, those customers’ orders (read-only) and abandoned carts.

1. Module settings

All configuration fits on a single screen: which group is treated as sales agents, whether to show the agent selector on the storefront, and whether the selection is required. Until a group is chosen, the module grants no access to any manager.

Fig. 1 — Module settings: administrator group, storefront selector visibility and required flag

2. Customer chooses a sales agent on registration

The registration form shows a “Your sales agent” field. The list is built automatically from active administrators of the selected group. If the field is set as required, CS-Cart’s standard validation blocks registration until a choice is made.

Fig. 2 — “Your sales agent” field on the new customer form (dropdown expanded)

3. Assigning customers by the administrator

The main administrator can assign and reassign customers on the Assignments page: one by one via the dropdown in each row, or in bulk — by selecting several customers and applying the action to all of them at once.

Fig. 3 — Assignments page: sales agent selector for each customer

Fig. 4 — Bulk assignment: several customers selected, manager chosen in the bottom “Apply to selected” dropdown

Every assignment change is recorded in the history: date, previous agent, new agent, who made the change and the source (administrator action or customer selection on registration). The history is available for each customer.

Fig. 5 — Assignment history for a customer: previous agent, new agent, who changed and source

4. Personal manager dashboard

After login a sales agent sees their own figures instead of the store-wide dashboard: sales amount, number of orders, number of assigned customers and incomplete purchases for the selected period, plus recent orders and carts.

Fig. 6 — Dashboard under a sales agent account (only their customers and orders are visible)

5. My customers

A dedicated list of assigned customers: name, e-mail, registration date, number and total of orders, last order date, and a flag for an incomplete purchase. The manager sees only their own customers.

Fig. 7 — “My customers” page under a sales agent account

6. Order history — read-only

From the customer list the manager can open the full order history of a specific customer. Statuses, dates, totals and contacts are visible; changing orders is not possible.

Fig. 8 — Customer order history (read-only mode)

7. Incomplete purchases

The manager sees abandoned carts of their own customers only — with last update date, item count and total. Guest carts and carts belonging to other managers’ customers never appear in the list.

Fig. 9 — “Incomplete purchases” page under a sales agent account

8. Security — not just hidden buttons

Restrictions are enforced on the server. Attempting to open someone else’s order via a direct link returns the standard CS-Cart access denied response — with no order data exposed.

Fig. 10 — Sales agent tries to open another manager’s order: 403 Access denied

• Foreign order_id / user_id / cart via direct link → access denied.
• POST requests that change an order or assignment from a sales agent account are rejected.
• The agent ID submitted on registration is re-validated on the server.
• Filtering by assigned customers is applied in SQL, not after data is loaded.

Access matrix

What the module deliberately does NOT do

The module does not send automatic e-mails to customers, does not provide calling or messaging from the CS-Cart interface, and does not replace a CRM. It is a visibility and access-control tool: the manager sees whom to contact and why; further communication happens through the company’s usual channels.

Who it is for

• B2B and wholesale stores with personal account managers
• Stores with a multi-person sales team that need to separate the customer base
• Companies that must prevent managers from seeing each other’s clients
• Projects that need clear control over customer assignments