---
id: CAP-PFM-CSH-007
title: Visit settings and return to the preceding work
feature: FEAT-PFM-CSH-02
product_area: platform
module: console-shell
revision: 2
status: draft
product_intent: proposed
implementation_evidence: observed
supersedes: []
source_sha:
  react-console: baf6dae382d6f41dce976c7f848667ccc37e076f
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
intent_sources:
  - >-
    react-console:docs/url-architecture.md#3. Workspaces (decided by Andrew 2026-10-14; final
    acceptance 2026-10-15)
purpose: >-
  Administrative navigation lets staff move into settings without losing their previous working
  destination.
outcomes:
  - Administrative areas have focused navigation.
  - Staff have a direct route back to their preceding work.
concepts:
  - CON-PFM-CSH-002
actors:
  - ACT-PFM-001
surfaces:
  - console
preconditions: []
postconditions: []
permissions:
  - key: configuration.access
    where_checked: console
    scope: tenant
  - key: maintenance.access
    where_checked: console
    scope: tenant
  - key: security.access
    where_checked: console
    scope: tenant
  - key: data.jobs.view
    where_checked: console
    scope: tenant
  - key: configuration.responsibilities.view
    where_checked: console
    scope: tenant
  - key: platform.notifications.manage
    where_checked: console
    scope: tenant
  - key: platform.application.access
    where_checked: api
    scope: tenant
rules:
  - id: BR-CAP-PFM-CSH-007-01
    proved_by: [ATS-PFM-CSH-007-07]
    statement: >-
      The registered settings areas are Configuration, Maintenance, Data Management, Security,
      Responsibilities and Notifications, each with its own root and revealing permission.
    kind: policy
    enforced_at:
      - console
    must_prove: false
    provenance: observed
    source: 'react-console:components/console/nav-config.ts:settingsAreas'
    origin: none
  - id: BR-CAP-PFM-CSH-007-02
    proved_by: [ATS-PFM-CSH-007-01, TST-PFM-CSH-022]
    statement: >-
      In workspace mode an area appears in the user menu only when its permission passes and at
      least one destination in its navigation is visible.
    kind: permission
    enforced_at:
      - console
    must_prove: true
    provenance: test
    source: >-
      react-console:lib/console/__tests__/settings-area-menu.test.ts#does not offer Security or
      Maintenance to a person who holds only the areas' access keys
    origin: none
    note: The linked finding records the evidence limitation or implementation gap.
  - id: BR-CAP-PFM-CSH-007-03
    proved_by: [ATS-PFM-CSH-003-05, ATS-PFM-CSH-007-02]
    statement: >-
      A settings address replaces main navigation with that area’s menu and Back to app targets the
      last non-settings path, or home after direct entry.
    kind: lifecycle
    enforced_at:
      - console
    must_prove: true
    provenance: observed
    source: 'react-console:components/console/app-sidebar.tsx:AppSidebar, SettingsNavigation'
    origin: none
  - id: BR-CAP-PFM-CSH-007-04
    proved_by: [ATS-PFM-CSH-007-03]
    statement: >-
      The recorded root destinations are Users for Security, Scheduled Jobs for Maintenance and Data
      Imports for Data Management.
    kind: lifecycle
    enforced_at:
      - console
    must_prove: true
    provenance: documented
    source: 'react-console:docs/url-architecture.md#4.1 Tenant console'
    origin: >-
      react-console:docs/url-architecture.md#4.1 Tenant console (decided by Andrew 2026-10-14; final
      acceptance 2026-10-15)
  - id: BR-CAP-PFM-CSH-007-05
    proved_by: []
    statement: >-
      Configuration groups Data, Presentation, Workflows, Accounting, Billing and Connections before
      application settings, with All Applications first among its application links when permitted.
    kind: policy
    enforced_at:
      - console
    must_prove: false
    provenance: observed
    source: 'react-console:components/console/nav-config.ts:configurationArea'
    origin: none
    note: The linked finding records the evidence limitation or implementation gap.
  - id: BR-CAP-PFM-CSH-007-06
    proved_by: [ATS-PFM-CSH-007-04]
    statement: >-
      Maintenance contains Scheduled Jobs, while duplicate rules and integrations belong in
      Configuration and their old Maintenance paths preserve views and queries on redirect.
    kind: policy
    enforced_at:
      - console
    must_prove: true
    provenance: documented
    source: 'react-console:docs/url-architecture.md#3. Workspaces'
    origin: >-
      react-console:docs/url-architecture.md#3. Workspaces (Andrew, 2026-10-16: Maintenance holds
      Scheduled Jobs alone) (decided by Andrew 2026-10-14; final acceptance 2026-10-15)
  - id: BR-CAP-PFM-CSH-007-07
    proved_by: [ATS-PFM-CSH-007-05, TST-PFM-CSH-015]
    statement: >-
      Security lists Users, Roles, Policies and Rhythm Access, each with a separate entry
      permission.
    kind: policy
    enforced_at:
      - console
    must_prove: false
    provenance: observed
    source: 'react-console:components/console/nav-config.ts:securityArea'
    origin: none
  - id: BR-CAP-PFM-CSH-007-08
    proved_by: []
    statement: >-
      Data Management’s revealing key maps to bulk-record authority rather than application
      availability.
    kind: permission
    enforced_at:
      - console
    must_prove: false
    provenance: observed
    source: 'react-console:components/console/nav-config.ts:dataManagementArea'
    origin: none
  - id: BR-CAP-PFM-CSH-007-09
    proved_by: []
    statement: >-
      Each settings area provides its own filter using the same matching behavior as main
      navigation.
    kind: policy
    enforced_at:
      - console
    must_prove: false
    provenance: observed
    source: 'react-console:components/console/app-sidebar.tsx:SettingsNavigation'
    origin: none
  - id: BR-CAP-PFM-CSH-007-10
    proved_by: [ATS-PFM-CSH-007-06, TST-PFM-CSH-019]
    statement: >-
      Orders & Inventory configuration registers Stores with its own view key and omits Price
      Schedules from both the configuration-area catalogue and menu.
    kind: permission
    enforced_at:
      - console
    must_prove: true
    provenance: test
    source: >-
      react-console:lib/console/__tests__/orders-nav.test.ts#lists Stores with its own view
      permission; lib/console/__tests__/orders-nav.test.ts#does not list Price Schedules: a schedule
      belongs to the event that sells the product (ruling R5, 2026-10-22)
    origin: none
scenarios:
  - id: SC-CAP-PFM-CSH-007-01
    given: A contact page is the administrator’s current work.
    when: They enter Configuration and later use Back to app.
    then: The contact path is restored.
    provenance: observed
    source: 'react-console:components/console/app-sidebar.tsx:AppSidebar'
  - id: SC-CAP-PFM-CSH-007-02
    given: The person holds Security’s area key but no visible Security entry key.
    when: The account menu is generated.
    then: Security is not offered.
    provenance: observed
    source: 'react-console:components/console/app-sidebar.tsx:AppSidebar'
edge_cases: []
constraints: []
depends_on: []
related:
  - CAP-PFM-CSH-005
  - CAP-PFM-CSH-006
  - CAP-PFM-CSH-017
journeys:
  - JNY-PFM-CSH-002
open_questions: []
evidence:
  - >-
    react-console at baf6dae: components/console/{nav-config.ts,app-sidebar.tsx},
    lib/console/use-visible-nav.ts, lib/console/__tests__/settings-area-menu.test.ts,
    lib/configuration/areas.ts (movedMaintenanceAreaPath), docs/url-architecture.md §3 and §4.1,
    e2e/security/navigation.spec.ts, e2e/dev/regions.dev.spec.ts.
  - >-
    services-platform at ad3f6a6: aws/platform.service.ts (APPLICATION_PERMISSIONS:
    platform.application.access reveals the administration areas).
controls: [TC-AVL-001, TC-AVL-004, TC-AZ-001, TC-AZ-002, TC-AZ-003, TC-AZ-004, TC-DAT-001, TC-DAT-003, TC-IAM-001, TC-IAM-006, TC-LOG-004, TC-LOG-005, TC-MON-001, TC-MON-003, TC-PI-002, TC-PI-004, TC-PI-005, TC-PRV-001, TC-PRV-002, TC-TEN-001, TC-TEN-002, TC-TEN-003, TC-VEN-001, TC-VEN-002, TC-VEN-003]
exercised_by: [FAS-PFM-CSH-02-01, FAS-PFM-CSH-02-03, FAS-PFM-CSH-02-04]
suites: [TST-PFM-CSH-015, TST-PFM-CSH-019, TST-PFM-CSH-022]
---
# Visit settings and return to the preceding work

## Purpose

Administrative navigation lets staff move into settings without losing their previous working destination.

## How It Works

An administrator opens an available settings area from the account menu. The address selects a focused menu for that area. The sidebar retains the last working path so the administrator has a return destination. A direct arrival in settings has no preceding working page and returns home. Area visibility and individual page authority are separate checks. The product should test the complete return journey and refused destinations in a browser.

## Relationships

- Main navigation records the work destination used by Back to app.
- The record-owning module governs each settings screen.
