Category coverage identifies the kind of proof present. Detailed transition, permission and invariant obligations and unbound proposals remain in the coverage finding until their individual cases are accounted for.
The owning save accepts the authorized upload and refuses the mismatched uploader. The structured interaction rows identify the related capabilities exercised and any remaining gap. Cross-capability workflow seams remain subject to the detailed coverage audit.
Coverage
Rulecovered
Transitiongap: FND-PFM-MTD-069
Validationcovered
Permissioncovered
Edgecovered
Failuregap: FND-PFM-MTD-069
Boundarycovered
Concurrencygap: FND-PFM-MTD-069
Invariantcovered
Interactioncovered
Test Scenarios
8 scenarios proving CAP-PFM-MTD-007; 7 bound to an existing test.
Administrator, User and Read Only contexts are available.
Steps
[
{
"do": "Request staging as authorized, unauthorized and unsigned callers.",
"provenance": "test",
"source": "services-platform:modules/files/tests/e2e/files.e2e.spec.js#is refused 403 by the dispatcher, and nothing is issued"
}
]
Expected
Authorized tiers receive an issue; unauthorized and unsigned requests fail without issuance. Read Only lacks the upload grant.
Data
Administrator, User and Read Only contexts are available.
[
{
"do": "Name a workspace in the body and request another customer’s workspace.",
"provenance": "test",
"source": "services-platform:modules/files/tests/e2e/files.e2e.spec.js#refuses a body that names a workspace of its own"
}
]
Expected
Both attempts fail and no upload issue is created.
[
{
"do": "Request pictures at ten MiB and one byte above, documents at twenty-five MiB and one byte above, and zero or fractional sizes.",
"provenance": "test",
"source": "services-platform:modules/files/tests/integration/services/uploads/issue-upload.integration.spec.js#refuses a picture over 10 MiB, naming size, and signs and records nothing"
}
]
Expected
Boundary sizes succeed; over-limit, zero and fractional sizes fail by size without signing or recording.
[
{
"do": "Request SVG and document images, an executable file and permitted formats.",
"provenance": "test",
"source": "services-platform:modules/files/tests/unit/upload-keys.spec.ts#refuses SVG for a picture by its type, naming content_type"
}
]
Expected
Disallowed declarations fail by media type and permitted formats are accepted.
[
{
"do": "Build image and file keys and submit a path-like filename.",
"provenance": "test",
"source": "services-platform:modules/files/tests/unit/upload-keys.spec.ts#is tmp, the workspace, the object folder, a public- upload directory for a picture, and the file name"
}
]
A real local signer has credentials supplied by a test fixture.
Steps
[
{
"do": "Sign an upload and inspect its signature and returned headers.",
"provenance": "test",
"source": "services-platform:modules/files/tests/unit/upload-presign.spec.ts#signs the type, the length and both metadata headers, so S3 refuses a PUT that changes any"
}
]
Expected
Type, length and uploader metadata are signed and expiry is fifteen minutes.
Data
A real local signer has credentials supplied by a test fixture.
[
{
"do": "Issue an upload and inspect the ledger and audit.",
"provenance": "test",
"source": "services-platform:modules/files/tests/integration/services/uploads/issue-upload.integration.spec.js#appends one file_upload audit event naming who was given the upload and for what"
}
]
Expected
One issue and one audit identify the requester and declared destination.
A file property exists and two authorized people can obtain staging.
Steps
[
{
"do": "Issue and upload as the first person, save as that person, then attempt a new save using another person’s staging identity.",
"provenance": "proposed",
"source": [
"services-platform:docs/files.md#The signature",
"services-platform:modules/custom-objects/tests/integration/services/persistence/custom-object-records.integration.spec.js#names a create’s missing upload at properties.<key>, without the address sent"
]
}
]
Expected
Read the managed attachment after success and inspect the rejected property after the second attempt.
Data
A file property exists and two authorized people can obtain staging.
Source
services-platform:docs/files.md#The signature,services-platform:modules/custom-objects/tests/integration/services/persistence/custom-object-records.integration.spec.js#names a create’s missing upload at properties.<key>, without the address sent