User Flow Mickael Rutembya · Flow Atlas

Owner Login

Authenticated owner accesses the sovereign workspace. Staff-only route with login form, session validation, and redirect to dashboard.

Flow intent

What the user is trying to do

« Authenticate as staff to access the owner workspace and manage pricing, leads, and contracts. »

Entry points

Element	Destination
Direct navigation /owner/login/	`/owner/login/`
Owner dashboard when not authenticated	`/owner/login/`

Flow

Adjacent routes — click a node to open it.userflow

flowchart LR A["Visitor navigates to /owner/login/"] --> B["Land on login form"] B --> C["Enter credentials"] C --> D{"Valid credentials?"} D -->|Yes| E["Session created"] E --> F["Redirect to /owner/"] F --> G["Owner dashboard loaded"] D -->|No| H["Error message shown"] H --> C G --> I["Access leads, contracts, quotes"] I --> J["Logout via form"] J --> K["Session destroyed"] K --> L["Redirect to home"] click B "http://localhost:8000/owner/login/" "Open Login" click F "http://localhost:8000/owner/" "Open Dashboard"

Screens

Screen	Key content	CTA
Login form	Username, password fields, CSRF token	Sign in
Owner dashboard	Active profile, stats, admin links, security controls	Leads, Contracts, Quotes, Logout

Scenario

Owner accesses workspace to review leads

Trigger

Owner receives notification of new qualification lead
Navigates directly to /owner/login/
Enters staff credentials

Experience

Login form loads with no pre-filled data.
Owner enters credentials and submits.
Server validates session, redirects to /owner/.
Dashboard loads with active profile and leads radar.
Owner clicks "Radar de qualification client" to review leads.

Trust and safety rules

Login route is staff-only — not indexed by search engines.
CSRF protection is enforced on all POST requests.
Session is signed and protected against tampering.
Failed login attempts do not reveal whether username exists.
Logout destroys the session completely.

Interaction notes

Form uses Django's CSRF token.
POST to /owner/login/ with username and password.
Redirect to /owner/ on success.
Logout form POSTs to /owner/logout/.

Result states

State	What the visitor sees	What happens next
Unauthenticated	Login form with no pre-filled data	Enter credentials to proceed
Authenticated	Owner dashboard with full admin access	Can access leads, contracts, quotes, settings
Failed login	Generic error message	Retry or contact administrator
Logged out	Redirected to home page	Session destroyed, must re-authenticate

Mickael Rutembya generated design flow ·userflow