Marketplace returns: shared access for after-sales questions

Review shared access for after-sales questions in Marketplace returns. Check document scope, failure paths and source evidence through controlled tests.

What the documents look like

Platform refund and return handling occurs continuously, order by order. A single after-sales case typically produces a refund application, a return logistics document, quality inspection photos, and a refund approval record. These materials sit in different systems: the platform after-sales console, customer service chat, WMS receiving, and payment refund records. Each source carries a different part of the case, and each updates per order or daily. The after-sales question-answering step has to line these materials up against the same order and the same return stage before anyone decides what to share externally and how to embed that sharing into an existing system.

The mismatch between systems matters here. A refund application states what the buyer requested. A return logistics document states what was received. Quality inspection photos state what the warehouse observed. A refund approval record states what the business decided. Sharing a conversation link does not move any of these states forward. The link only opens a dialogue entry point.

Constraints at the shared access step

A no-login window is created from the application detail page under publishing channels. Its name is used only for record display. The system generates a complete link that any internet user can open, and the cost is billed to the team that owns the application. The link identifier opens a conversation; it does not serve as business authorization or as proof of order ownership.

Identity verification is a POST request root address. After it is configured, initialization, conversation start, and conversation finish each send a request to a specific interface under that address. The server returns only whether verification succeeded. The response contains success and uid. FastGPT checks whether success is true to decide whether the user may continue. The uid must be returned and must be a string no longer than 255 bytes that does not contain "|", "/", or "\". Otherwise the system returns Invalid UID.

The anonymous local identifier depends on the same device and the same browser. Only the most recent 30 days and 20 records can be pulled. Records across devices require a separate identity and session design. Viewing quoted fragments, viewing full quoted text, and downloading or opening source originals are display settings. Retrieval and similarity scores do not carry permission or entity-isolation duties.

Hypothetical paper exercise sample: the material text reads, "Refund application: order A-2024-0301. Buyer submitted a return and refund on March 2. Return logistics document shows signed receipt on March 5. Quality inspection photos show outer packaging damage. Refund approval field: pending review." The proposed copy sentence is, "This order's refund has been approved and the result can be shared externally." The comparison point is the refund approval field, which reads pending review. The proposed sentence states approval, which does not match the field value. Pending review is not approval.

Configuration and implementation checks

Configuration itemHypothetical trial starting point for this pageComparison method
No-login window nameAfter-sales question entryUsed only for record display; kept separate from order numbers and buyer information
Expiration timeFilled according to this exerciseCompared against the actual period the link is used; after expiry the link cannot be used
QPMFilled according to this exerciseCompared against the maximum accesses per user per minute
Point capFilled according to this exerciseCompared against the billing data produced by the link
Identity verification root addressAssumed as https://example.testCompared against the POST request root address format; the full path is not written
Conversation record scope30 days, 20 recordsCompared against the documented pull limit

These starting values are for this paper exercise only. They are not official defaults and were not tested. The expiration time, QPM, and point cap are filled according to the exercise because the documentation states they are configurable; the exercise does not assign fixed numbers to them. Some parameters are supported only in the commercial edition.

Three common errors

  1. Treating the link identifier as business authorization. The shared link controls a conversation entry only. Refund approval, return responsibility judgment, and refund amount execution are confirmed separately in the after-sales console.
  2. Writing a pending-review state as approved. In the sample, the refund approval field reads pending review, and the proposed sentence says approved. The same field holds inconsistent values. Pending review does not equal approval.
  3. Treating a similarity setting as a permission filter. Similarity does not exclude unrelated business records or unauthorized records. Retrieval results do not constitute an authorization basis.

How to verify the setup

  1. Input the sample material text and the proposed copy sentence. Compare the refund approval field value against the wording of the proposed sentence. If the approval field reads pending review, the proposed sentence is not supported. Record the result as not supported.
  2. Input an authToken and the identity verification root address. Compare the returned success and the uid format. If success is true and the uid contains none of the restricted characters and does not exceed 255 bytes, verification passes. Otherwise record an identity error.
  3. Input an empty result [] and check the downstream design. Observe whether the downstream handles it as an empty set. Do not claim that a fictional rule search necessarily returns an empty set. Record the actual observation.

These verification steps describe expected outcomes for a paper exercise. They do not report a completed test, a deployment, or an approval. Where the documentation does not state a field, the value remains unknown.