---
id: TST-PFM-MTD-084
title: upload permission
kind: unit
product_area: platform
module: metadata
revision: 1
status: draft
source_sha:
  services-platform: ad3f6a6582843008ed0f5a17b131878d15829af1
repository: services-platform
files:
  - modules/files/tests/unit/upload-permission.spec.ts
implements:
  - ATS-PFM-MTD-007-01
environment: local
implementation_state: implemented
latest_result: not-run
latest_run_at: null
latest_run_ref: null
conformance: not-verified
estimated_minutes: 1
isolation: >-
  Prepared integration database and the suite fixture records; fixture teardown restores or removes its own
  rows.
evidence:
  - 'services-platform:modules/files/tests/unit/upload-permission.spec.ts'
  - >-
    services-platform:modules/files/tests/unit/upload-permission.spec.ts#publishes that one key alone, and
    none of the five standard actions of a resource with records
  - 'services-platform:modules/files/tests/unit/upload-permission.spec.ts#declares it at the user tier'
  - 'services-platform:modules/files/tests/unit/upload-permission.spec.ts#does not mark it staff-only'
  - >-
    services-platform:modules/files/tests/unit/upload-permission.spec.ts#generates the three tier policies the
    key is measured against
  - 'services-platform:modules/files/tests/unit/upload-permission.spec.ts#puts it in Platform Administrator'
  - 'services-platform:modules/files/tests/unit/upload-permission.spec.ts#puts it in Platform User'
  - 'services-platform:modules/files/tests/unit/upload-permission.spec.ts#keeps it out of Platform Read Only'
  - >-
    services-platform:modules/files/tests/unit/upload-permission.spec.ts#declares the issue route at POST
    /files/{tenantId}/uploads
  - 'services-platform:modules/files/tests/unit/upload-permission.spec.ts#serves it on a console access context'
  - 'services-platform:modules/files/tests/unit/upload-permission.spec.ts#requires exactly this key'
fixture_imports:
  - chai
  - '@rhythmsoftware/macroservice-http/route-access'
  - ../../../../aws/api/platform.routes
  - ../../../security/services/catalog/reconcile-catalog
  - ../../aws/api/files.routes
test_doubles: []
limitations: []
unmatched_specification: null
binding_assertions:
  - scenario: ATS-PFM-MTD-007-01
    provenance: test
    source:
      - >-
        services-platform:modules/files/tests/unit/upload-permission.spec.ts#keeps it out of Platform Read
        Only
    note: >-
      These references identify the assertions this suite contributes; bindings to additional suites remain
      part of the scenario’s proof.
---

# Upload permission

## Verification Boundary

This unit suite checks upload issuance within the local test harness. The registered file and pinned revision define its boundary.

## What This Suite Proves

The bindings identify the detailed or feature scenarios whose outcomes have assertions in this suite. Original case references remain attached to the detailed scenarios so a reviewer can inspect the exact assertion. Assertions are evidence of implemented checks; no execution result is claimed.

## What It Does Not Prove

The register does not establish a current passing run or full specification conformance. Behavior outside the suite’s fixtures and assertions remains unverified.

## Real Dependencies and Test Doubles

The imported contract and validation code runs locally. The fixture imports identify the setup seams; this register makes no broader claim that dependencies are undoubled.

## Must Not Be Doubled

The contract or validation function under examination must run directly; expected outputs cannot replace it.