Verified BursaPay finance workflow: Explains the protected Finance action for locking or unlocking a user's bank details.
1. Overview & Purpose
The bank-lock endpoint is POST-only and toggles BankDetail.locked inside an atomic transaction while recording the previous and new state in FinanceAuditLog.
2. Requirements & Setup
The user must have an existing BankDetail record and Finance access.
3. Step-by-Step Workflow
- Open the relevant Finance workflow.
- Select the user, payment, fee, top-up or account context.
- Review the available financial records and filters.
- Verify the displayed result and related audit trail before acting on it.
4. Rules & Troubleshooting
If no bank details exist, the operation returns an error and does not create the toggle audit.
5. Verification & Next Steps
Use the audit entry to verify exactly which state transition occurred.