The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.
| # | Surface | Action | Capability | Expected | Provenance |
|---|---|---|---|---|---|
| 1 | /console/{tenantId} | Looks for Membership in the workspace navigation. | CAP-PFM-CSH-006 | No Membership section is offered for this application answer. | test react-console:e2e/mock/application-access.mock.spec.ts#an application the organization does not have is absent from the sidebar |
| 2 | /console/{tenantId}/membership/members | Follows a shared members-list destination. | CAP-PFM-CSH-015 | The page explains that Membership is unavailable and offers onward destinations. | test react-console:e2e/mock/application-access.mock.spec.ts#a deep link into one of them says the application isn't available |
| 3 | /console/{tenantId}/configuration | Selects View Applications. | CAP-PFM-CSH-017 | The administrative list presents products and explains unavailable entries. | observed |
| 4 | /console/{tenantId} | Uses the header logo to return home after Membership is enabled. | CAP-PFM-CSH-014 | Membership appears once a subsequent application refresh learns the changed answer. | observed react-console:lib/security-context/provider.tsx:refreshApplications |
| Path | From step | Condition | Path taken | Outcome | Provenance |
|---|---|---|---|---|---|
| alternate | 2 | Membership is enabled but a required destination permission is missing. | The page guard explains a personal permission refusal. | The person can return home and request the authority needed for the task. | observed react-console:lib/authz/guard.tsx:RequirePermission, AccessDenied |
| alternate | 4 | An application being used is withdrawn instead. | An application-related request refusal triggers a refreshed answer. | The withdrawn product is removed from navigation without reloading. | test react-console:e2e/mock/application-access.mock.spec.ts#brings the launcher up to date instead of leaving it offering what is gone |
| failure | 3 | The administrator lacks authority to inspect application availability. | The administrative page guard presents a permission refusal. | Someone with the required authority must inspect the application position. | observed react-console:components/configuration/applications/tenant-applications.tsx:TenantApplications; lib/authz/guard.tsx:RequirePermission |
| Id | Statement | Provenance |
|---|---|---|
01 | An unavailable application is omitted from the workspace menu. | test react-console:e2e/mock/application-access.mock.spec.ts#an application the organization does not have is absent from the sidebar |
02 | A direct destination explains product unavailability and offers the application list. | test react-console:e2e/mock/application-access.mock.spec.ts#a deep link into one of them says the application isn't available |
03 | The administrative list translates unavailable states into understandable reasons. | observed react-console:lib/applications/availability.ts:applicationAvailabilityReason |
End-to-end policy: required: The mock browser suite covers omitted navigation and the unavailable destination. The administrative list and permission-refusal portions also need browser coverage to prove the full explanatory journey.