The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.
| # | Surface | Action | Capability | Expected | Provenance |
|---|---|---|---|---|---|
| 1 | /console/{tenantId}/maintenance | Enter Maintenance through the user menu. | CAP-PFM-OPS-005 | Scheduled Jobs opens as the available Maintenance screen. | test react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#is the only thing Maintenance holds |
| 2 | listJobsOfTenant | Inspect the workspace run list. | CAP-PFM-OPS-005 | Recent runs display their type, application, subject, status, timing and requester. | test react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#lists the tenant's runs: what each was about, its status, and who started it |
| 3 | listJobKindsOfTenant | Select a run category. | CAP-PFM-OPS-005 | The choices show locally present categories and counts and the list follows the selected type. | test react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#filtering by job type narrows the list to that type |
| 4 | getJobOfTenant | Inspect a failed row. | CAP-PFM-OPS-005 | The read-only panel presents failure detail, steps, attempts and events. | test react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#a row opens the run, read-only, in a drawer on the right |
| 5 | listJobsOfTenant | Inspect a published run owned by another service. | CAP-PFM-OPS-007 | The shared list includes the owner’s readable subject. | test services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#answers exactly the tenant's jobs, of every macroservice |
| Path | From step | Condition | Path taken | Outcome | Provenance |
|---|---|---|---|---|---|
| alternate | 2 | Staff enter through a workspace access grant. | Use the same workspace run surface under that grant. | The granted workspace remains the reading boundary. | test services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#lists exactly the tenant's jobs, whatever customer they name |
| failure | 1 | Jobs-read authority is missing. | Suppress the Maintenance link and refuse the page. | The caller cannot inspect runs. | test react-console:e2e/mock/maintenance-job-runs.mock.spec.ts#is the console's Access Denied state, and its link is not offered |
| failure | 4 | The selected run belongs to another workspace. | Return an unknown-run response. | No foreign run details are exposed. | test services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#answers the run as unknown under another tenant's path |
| Id | Statement | Provenance |
|---|---|---|
01 | Workspace reads cover that workspace’s published services without admitting foreign workspace runs. | test services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#refuses another customer's tenant, as every tenant route does |
02 | The monitor supplies inspection without start, cancellation or retry controls. | test services-platform:modules/jobs/tests/e2e/jobs.e2e.spec.js#declares every jobs route a GET |
03 | Workspace snapshot runs retain their month-specific subjects even without customer attribution. | test services-platform:modules/jobs/tests/e2e/jobs-tenant-runs.e2e.spec.js#names Platform's snapshot run by its snapshot and month |
End-to-end policy: required: Browser evidence is needed for navigation, displayed run information and permission refusal; backend cases separately establish workspace scope.