---
id: JNY-ACC-BKS-005
title: Inspect books configuration as a reader
feature: FEAT-ACC-BKS-06
product_area: accounting
module: books
revision: 1
status: draft
product_intent: confirmed
implementation_evidence: observed
supersedes:
  - ACT-ACC-0013
  - ACT-ACC-0014
  - ACT-ACC-0040
source_sha:
  services-accounting: f47cb263875bbc0c5640fba7dae6785ec32695f8
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
actor: ACT-ACC-002
goal: Review accounting setup while preserving it from accidental change.
capabilities:
  - CAP-ACC-BKS-016
  - CAP-ACC-BKS-001
  - CAP-ACC-BKS-005
  - CAP-ACC-BKS-009
  - CAP-ACC-BKS-014
screens:
  - '/console/{tenantId}/configuration/accounting/businessUnits'
  - '/console/{tenantId}/configuration/accounting/glAccounts'
  - '/console/{tenantId}/configuration/accounting/fiscalYears'
  - '/console/{tenantId}/configuration/accounting/documentTemplates'
steps:
  - 'n': 1
    surface: '/console/{tenantId}/configuration/accounting/businessUnits'
    action: Enter Accounting configuration with the reader persona.
    capability: CAP-ACC-BKS-016
    expected: The permitted configuration areas can be opened.
    provenance: test
    source: >-
      react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0013.spec.ts#ACT-ACC-0013
  - 'n': 2
    surface: '/console/{tenantId}/configuration/accounting/businessUnits'
    action: Inspect a unit and its posting defaults.
    capability: CAP-ACC-BKS-001
    expected: The records are readable and the unit editor permits inspection only.
    provenance: test
    source: >-
      react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0013.spec.ts#ACT-ACC-0013
  - 'n': 3
    surface: '/console/{tenantId}/configuration/accounting/glAccounts'
    action: 'Review chart, receiving accounts, dimensions and terms.'
    capability: CAP-ACC-BKS-005
    expected: The lists load without functioning write actions.
    provenance: test
    source: >-
      react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0013.spec.ts#ACT-ACC-0013
  - 'n': 4
    surface: '/console/{tenantId}/configuration/accounting/fiscalYears'
    action: Inspect years and current-period lookup.
    capability: CAP-ACC-BKS-009
    expected: 'Calendar reads succeed without generation, rename or delete actions.'
    provenance: test
    source: >-
      react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0014.spec.ts#ACT-ACC-0014
  - 'n': 5
    surface: '/console/{tenantId}/configuration/accounting/documentTemplates'
    action: 'Inspect template content, preview and merge vocabulary.'
    capability: CAP-ACC-BKS-014
    expected: The content is readable and previewable but cannot be saved.
    provenance: test
    source: >-
      react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0014.spec.ts#ACT-ACC-0014
alternates: []
failures:
  - from_step: 3
    condition: The reader bypasses controls and submits service mutations.
    path: Resource permission checks refuse each write.
    outcome: 'No record is added, changed or removed.'
    provenance: test
    source: >-
      services-accounting:modules/books/tests/e2e/configuration-security.e2e.spec.js#leaves
      the unit as it was after the refusals
rules_in_play:
  - BR-CAP-ACC-BKS-016-01
  - BR-CAP-ACC-BKS-016-04
  - BR-CAP-ACC-BKS-016-09
assertions:
  - id: AS-JNY-ACC-BKS-005-01
    statement: Every permitted configuration read remains accessible.
    provenance: test
    source: >-
      react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0013.spec.ts#ACT-ACC-0013
  - id: AS-JNY-ACC-BKS-005-02
    statement: Attempted mutations receive refusals and leave saved data intact.
    provenance: test
    source: >-
      react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0013.spec.ts#ACT-ACC-0013
  - id: AS-JNY-ACC-BKS-005-03
    statement: The review exposes no records from another workspace.
    provenance: test
    source: >-
      react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0040.spec.ts#ACT-ACC-0040
e2e_policy: required
e2e_reason: >-
  The browser must demonstrate that permissions govern controls on every
  reviewed screen.
evidence:
  - >-
    Verified source file:
    react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0013.spec.ts
  - >-
    Verified source file:
    react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0014.spec.ts
  - >-
    Verified source file:
    react-console:acceptance/accounting/playwright/journeys/configuration/ACT-ACC-0040.spec.ts
  - >-
    Verified source file:
    services-accounting:modules/books/tests/e2e/configuration-security.e2e.spec.js
proved_by: []
---

# Inspect books configuration as a reader

## Story

A finance reviewer enters Accounting with Read Only access and inspects the unit, chart, receiving destinations, reporting setup and terms. They review the fiscal calendar and template preview without being offered mutation workflows. Permission checks also refuse direct write attempts, and another workspace’s data remains outside the review.