Contact Messages

What This Option Does

Contact Messages is the incoming website contact inbox for backoffice handling.

How Admin Uses This

1. Open Contact Messages.
2. Review sender and message details.
3. Process internally in support/sales workflow.
4. Mark/retain according to process policy.

Screenshot Placeholder

Add screenshot file at documentaion/assets/images/backoffice-contact-message.png

Enterprise Technical Specification

Business Capabilities

• Message list/detail
• Message delete

API Contract Surface

Primary API endpoints used by this module:

• /api/v1/backoffice/content/contact-messages
• /api/v1/backoffice/content/contact-messages/{id}

Permission Blueprint

Recommended permission keys for production role design:

• backoffice.contact_message.view
• backoffice.contact_message.delete

Operational Risk and Control Notes

• Deleting unresolved message loses support history
• Enable activity logging and include company_id, actor ID, and target entity ID in audit traces.
• Apply least-privilege principle for create/update/delete actions.

QA Verification Checklist

• Validate list API load, empty-state behavior, and pagination consistency.
• Verify create/update/delete response contract (status, message, data).
• Confirm permission denial responses for unauthorized roles.
• Test edge inputs and invalid IDs for safe error handling.