---
id: ADR-ACC-CLS-012
title: Workspace Grants Authorize Close and Reopen Actions
product_area: accounting
module: close
revision: 1
status: proposed
design_intent: proposed
source_sha:
  services-accounting: f47cb263875bbc0c5640fba7dae6785ec32695f8
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
decision: >-
  Fiscal-period read, close and reopen grants currently cover all business units
  within a workspace, with close and reopen classified as sensitive
  administrator actions.
constrains:
  - SVC-ACC-CLS-fiscal-close
  - SCR-ACC-CLS-001
  - SCR-ACC-CLS-005
  - RESP-ACC
origin: >-
  reconciliation decision D5 (business-unit-scoped grants not available in
  Platform), followed here; FND-ACC-CLS-006
alternatives:
  - option: Maintain a unit allowlist inside the close service.
    why_not: >-
      A separate local list would duplicate Platform’s authorization
      responsibility and require its own audit contract.
consequences:
  - Holding the close grant applies to every business unit in the workspace.
  - >-
    Earlier unit-scoped wording and the catalogue’s pre-route comment do not
    describe current behavior.
supersedes: []
evidence:
  - >-
    services-accounting at f47cb263:
    aws/accounting.service.ts:FiscalPeriodActions, FiscalPeriodsPermissions;
    tests/unit/fiscal-close-permissions.spec.ts.
---

# Workspace Grants Authorize Close and Reopen Actions

## Context

The earlier close design asks for business-unit scope, while the permission catalogue exposes workspace-wide keys.

## Decision

Describe the existing grant boundary and keep narrower business-unit authority as a Platform-led change rather than inventing a local permission system.

## Alternatives Considered

Maintain a unit allowlist inside the close service. A separate local list would duplicate Platform’s authorization responsibility and require its own audit contract.

## Consequences

Holding the close grant applies to every business unit in the workspace. Earlier unit-scoped wording and the catalogue’s pre-route comment do not describe current behavior.