Rhythm 2.0 Specifications

Appearance

ID Registry: Platform → Security, Workspaces and Customers

Markdown

ID Registry: Platform → Security, Workspaces and Customers

Markdown

KindId registryProduct areaPlatformModuleSecurity, Customers and Workspaces

Read atservices-platform ad3f6a65react-console baf6dae3

ID Registry: Platform → Security, Workspaces and Customers ​

This ledger reserves identifiers before authoring. Allocated numbers remain permanent after retirement or consolidation. The first six actor identifiers belong to the shared Platform series; the three superseded access concepts remain reserved and are now facets of User Account.

Series ​

SeriesAllocatedNext free
MOD-PFM-SECthe module charter—
FEAT-PFM-SEC-01 to 0607
CON-PFM-SEC-001 to 006007
ACT-PFM-001 to 006 (product-area wide, allocated by this module)007
CAP-PFM-SEC-001 to 020021
JNY-PFM-SEC-001 to 005006
ATS-PFM-SEC-001 to 020 (one per capability, same number)021
FND-PFM-SEC-001 to 057 (044 to 057 by the design examination); 058 to 065 (control gaps)066
OQ-PFM-SEC-001 to 004 (004 by the design draft)005
DOM-PFM-SEC-001 to 003, the numbers of the three active concepts; 004 to 006 are not used because those concepts are superseded facets of User Account—
INV-DOM-PFM-SEC-001-01 to 0708
INV-DOM-PFM-SEC-002-01 to 1213
INV-DOM-PFM-SEC-003-01 to 2223
STATE-PFM-SEC-001 to 011012
WF-PFM-SEC-001 to 016017
SVC-PFM-SEC-security, tenants, customers (one per source module)—
SCR-PFM-SEC-001 to 031032
ADR-PFM-SEC-001 to 016017
IOP-PFM-SEC-none: the module asks no model a question001
AREA-PFMthe Platform overview, allocated by the area backfill—
AUTH-PFMthe Platform authorization model, allocated by the area backfill—
ROLE-PFM-001 to 008 (area-wide built-in roles)009
RESP-PFMthe Platform responsibilities file, created by this module's design draft—

| FAS-PFM-SEC- | 01 to 06 (same number as each feature) | 07 | | TST-PFM-SEC- | 001 to 266 | 267 |

Design Artifacts ​

IdTitle
DOM-PFM-SEC-001Customer
DOM-PFM-SEC-002Workspace
DOM-PFM-SEC-003User Account
STATE-PFM-SEC-001Workspace lifecycle
STATE-PFM-SEC-002Workspace business status
STATE-PFM-SEC-003Workspace retirement request
STATE-PFM-SEC-004Membership status
STATE-PFM-SEC-005Invitation
STATE-PFM-SEC-006Role assignment
STATE-PFM-SEC-007Staff access grant
STATE-PFM-SEC-008Custom and built-in access definition
STATE-PFM-SEC-009Service principal
STATE-PFM-SEC-010Portal sign-in pool
STATE-PFM-SEC-011Portal contact challenge
WF-PFM-SEC-001Provision a workspace
WF-PFM-SEC-002Open, reset and activate an initial load
WF-PFM-SEC-003Watch a retirement request through its waiting period
WF-PFM-SEC-004Purge a retired workspace
WF-PFM-SEC-005Invite a person and deliver the invitation
WF-PFM-SEC-006Accept an invitation
WF-PFM-SEC-007Suspend, reinstate, revoke or delete a membership
WF-PFM-SEC-008Flush the gateway's cached decisions
WF-PFM-SEC-009Authorize a request at the gateway
WF-PFM-SEC-010Reconcile derived role assignments
WF-PFM-SEC-011Grant and end staff entry to a customer workspace
WF-PFM-SEC-012Reconcile shared definitions, founding staff and principals on deploy
WF-PFM-SEC-013Onboard a workspace's portal sign-in pool
WF-PFM-SEC-014Register, confirm and sign in a portal member
WF-PFM-SEC-015Link a portal member to a contact
WF-PFM-SEC-016Sign in to the console and keep the session
SVC-PFM-SEC-securitySecurity service module
SVC-PFM-SEC-tenantsWorkspaces service module
SVC-PFM-SEC-customersCustomers service module
SCR-PFM-SEC-001Security area landing
SCR-PFM-SEC-002Users list
SCR-PFM-SEC-003User view
SCR-PFM-SEC-004Edit user
SCR-PFM-SEC-005Roles list
SCR-PFM-SEC-006New role
SCR-PFM-SEC-007Role view
SCR-PFM-SEC-008Edit role
SCR-PFM-SEC-009Policies list
SCR-PFM-SEC-010New policy
SCR-PFM-SEC-011Policy view
SCR-PFM-SEC-012Edit policy
SCR-PFM-SEC-013Rhythm access
SCR-PFM-SEC-014Sign in
SCR-PFM-SEC-015Sign out
SCR-PFM-SEC-016Forgot password
SCR-PFM-SEC-017Check your e-mail
SCR-PFM-SEC-018Reset password
SCR-PFM-SEC-019Second-factor code
SCR-PFM-SEC-020Session ended
SCR-PFM-SEC-021Sign-in provider return
SCR-PFM-SEC-022Accept invitation
SCR-PFM-SEC-023HQ home
SCR-PFM-SEC-024HQ customers list
SCR-PFM-SEC-025HQ customer detail
SCR-PFM-SEC-026HQ workspaces list
SCR-PFM-SEC-027HQ workspace detail
SCR-PFM-SEC-028Provision a workspace
SCR-PFM-SEC-029HQ staff list
SCR-PFM-SEC-030HQ staff detail
SCR-PFM-SEC-031HQ staff roles
ADR-PFM-SEC-001Workspace decisions and participant execution
ADR-PFM-SEC-002User Account aggregates
ADR-PFM-SEC-003Permanent readable customer and workspace identity
ADR-PFM-SEC-004Separate business status and lifecycle
ADR-PFM-SEC-005Durable execution after committed intent
ADR-PFM-SEC-006Retirement boundary and forward recovery
ADR-PFM-SEC-007Scoped authority with bounded cached context
ADR-PFM-SEC-008Provider synchronization and durable removal
ADR-PFM-SEC-009Recorded staff customer entry
ADR-PFM-SEC-010Release-controlled shared definitions
ADR-PFM-SEC-011No custom-field capability
ADR-PFM-SEC-012Submissions publication exclusions
ADR-PFM-SEC-013Versioned record replacement contract
ADR-PFM-SEC-014Dedicated security history and refusal recording
ADR-PFM-SEC-015Source-owned contact-derived access
ADR-PFM-SEC-016Confirmed portal self-registration

Rows Inside Artifacts ​

ArtifactTitleRules (BR-…-NN)Scenarios and edge cases (SC-…-NN)Next free BRNext free SC
CAP-PFM-SEC-001Establish and administer a customer01 to 1301 to 021403
CAP-PFM-SEC-002Maintain workspace information and operating status01 to 1501 to 021603
CAP-PFM-SEC-003Prepare a workspace for customer use01 to 1501 to 021603
CAP-PFM-SEC-004Manage a workspace retirement request01 to 1301 to 021403
CAP-PFM-SEC-005Join through an invitation01 to 1201 to 021303
CAP-PFM-SEC-006Use and recover a console sign-in01 to 1201 to 021303
CAP-PFM-SEC-007Understand available workspace access01 to 1301 to 021403
CAP-PFM-SEC-008Offer and manage an invitation01 to 1201 to 021303
CAP-PFM-SEC-009Maintain console memberships01 to 1201 to 021303
CAP-PFM-SEC-010Assign roles within a controlled scope01 to 1401 to 021503
CAP-PFM-SEC-011Review security changes and refused attempts01 to 1001 to 011102
CAP-PFM-SEC-012Model customer responsibilities with roles and policies01 to 1501 to 021603
CAP-PFM-SEC-013Publish shared access definitions from releases01 to 1301 to 011402
CAP-PFM-SEC-014Derive member access from appointments and eligibility01 to 1301 to 011402
CAP-PFM-SEC-015Enforce access at request boundaries01 to 1301 to 021403
CAP-PFM-SEC-016Administer Rhythm staff memberships01 to 1101 to 011202
CAP-PFM-SEC-017Control staff access to customer workspaces01 to 1401 to 021503
CAP-PFM-SEC-018Suspend and resume service principals01 to 0701 to 010802
CAP-PFM-SEC-019Register and authenticate portal members01 to 1101 to 011202
CAP-PFM-SEC-020Match portal memberships to CRM contacts01 to 0901 to 011002
JourneyTitleAssertions (AS-…-NN)Next free AS
JNY-PFM-SEC-001Prepare and hand over a customer workspace01 to 0304
JNY-PFM-SEC-002Join the console through an invitation01 to 0304
JNY-PFM-SEC-003Invite a colleague and maintain their console access01 to 0304
JNY-PFM-SEC-004Compose and assign a customer role01 to 0304
JNY-PFM-SEC-005Approve and end customer workspace access for support01 to 0304
Acceptance Test SetScopeScenarios (ATS-…-NN)Next free
ATS-PFM-SEC-001CAP-PFM-SEC-00101 to 1415
ATS-PFM-SEC-002CAP-PFM-SEC-00201 to 2425
ATS-PFM-SEC-003CAP-PFM-SEC-00301 to 2425
ATS-PFM-SEC-004CAP-PFM-SEC-00401 to 2627
ATS-PFM-SEC-005CAP-PFM-SEC-00501 to 2021
ATS-PFM-SEC-006CAP-PFM-SEC-00601 to 1314
ATS-PFM-SEC-007CAP-PFM-SEC-00701 to 1617
ATS-PFM-SEC-008CAP-PFM-SEC-00801 to 2223
ATS-PFM-SEC-009CAP-PFM-SEC-00901 to 2021
ATS-PFM-SEC-010CAP-PFM-SEC-01001 to 2223
ATS-PFM-SEC-011CAP-PFM-SEC-01101 to 1011
ATS-PFM-SEC-012CAP-PFM-SEC-01201 to 1819
ATS-PFM-SEC-013CAP-PFM-SEC-01301 to 1516
ATS-PFM-SEC-014CAP-PFM-SEC-01401 to 1314
ATS-PFM-SEC-015CAP-PFM-SEC-01501 to 1516
ATS-PFM-SEC-016CAP-PFM-SEC-01601 to 1011
ATS-PFM-SEC-017CAP-PFM-SEC-01701 to 2122
ATS-PFM-SEC-018CAP-PFM-SEC-01801 to 0910
ATS-PFM-SEC-019CAP-PFM-SEC-01901 to 1314
ATS-PFM-SEC-020CAP-PFM-SEC-02001 to 1314

Testing Back-fill Reservations ​

Feature suites reserve scenario numbers 01 to 05 each; the next free number is 06. The following executable suite identifiers are allocated before their artifacts are written.

IdControlsExisting Evidence
TST-PFM-SEC-001react-consoleacceptance/platform-attention/playwright/journeys/security/RA-ACC-0200.spec.ts
TST-PFM-SEC-002react-consoleacceptance/platform-attention/playwright/journeys/security/RA-ACC-0201.spec.ts
TST-PFM-SEC-003react-consoleacceptance/platform-attention/playwright/journeys/security/RA-ACC-0202.spec.ts
TST-PFM-SEC-004react-consolee2e/controlled/invitation-expired.controlled.spec.ts
TST-PFM-SEC-005react-consolee2e/controlled/reset-code-expired.controlled.spec.ts
TST-PFM-SEC-006react-consolee2e/controlled/security-context.controlled.spec.ts
TST-PFM-SEC-007react-consolee2e/controlled/social-callback.controlled.spec.ts
TST-PFM-SEC-008react-consolee2e/controlled/staff-deep-link.controlled.spec.ts
TST-PFM-SEC-009react-consolee2e/controlled/tenant-unavailable.controlled.spec.ts
TST-PFM-SEC-010react-consolee2e/dev/hq-home.dev.spec.ts
TST-PFM-SEC-011react-consolee2e/dev/hq-ops.dev.spec.ts
TST-PFM-SEC-012react-consolee2e/dev/hq-staff-flow.dev.spec.ts
TST-PFM-SEC-013react-consolee2e/dev/invitations.dev.spec.ts
TST-PFM-SEC-014react-consolee2e/dev/password-recovery.dev.spec.ts
TST-PFM-SEC-015react-consolee2e/dev/permissions.dev.spec.ts
TST-PFM-SEC-016react-consolee2e/dev/rhythm-access.dev.spec.ts
TST-PFM-SEC-017react-consolee2e/dev/session.dev.spec.ts
TST-PFM-SEC-018react-consolee2e/dev/sign-in.dev.spec.ts
TST-PFM-SEC-019react-consolee2e/dev/social-sign-in.dev.spec.ts
TST-PFM-SEC-020react-consolee2e/mock/application-access.mock.spec.ts
TST-PFM-SEC-021react-consolee2e/mock/hq-home.mock.spec.ts
TST-PFM-SEC-022react-consolee2e/mock/hq-lists.mock.spec.ts
TST-PFM-SEC-023react-consolee2e/mock/hq-ops.mock.spec.ts
TST-PFM-SEC-024react-consolee2e/mock/security-admin.mock.spec.ts
TST-PFM-SEC-025react-consolee2e/mock/security-editor-bar.mock.spec.ts
TST-PFM-SEC-026react-consolee2e/mock/security-granted-tenant.mock.spec.ts
TST-PFM-SEC-027react-consolee2e/mock/security-scoped-roles.mock.spec.ts
TST-PFM-SEC-028react-consolee2e/mock/security-view-edit.mock.spec.ts
TST-PFM-SEC-029react-consolee2e/mock/staff-landing.mock.spec.ts
TST-PFM-SEC-030react-consolee2e/security/access.spec.ts
TST-PFM-SEC-031react-consolee2e/security/invitations.spec.ts
TST-PFM-SEC-032react-consolee2e/security/navigation.spec.ts
TST-PFM-SEC-033react-consolee2e/security/policies.spec.ts
TST-PFM-SEC-034react-consolee2e/security/roles.spec.ts
TST-PFM-SEC-035react-consolee2e/security/users.spec.ts
TST-PFM-SEC-036react-consolelib/auth/__tests__/invitation-flow.test.ts
TST-PFM-SEC-037react-consolelib/auth/__tests__/invitations.test.ts
TST-PFM-SEC-038react-consolelib/auth/__tests__/refresh-refusal.test.ts
TST-PFM-SEC-039react-consolelib/auth/__tests__/safe-next.test.ts
TST-PFM-SEC-040react-consolelib/auth/__tests__/session.test.ts
TST-PFM-SEC-041services-platformmodules/customers/tests/e2e/customers.e2e.spec.js
TST-PFM-SEC-042services-platformmodules/customers/tests/e2e/hq-customers.e2e.spec.js
TST-PFM-SEC-043services-platformmodules/customers/tests/integration/db/customers.table.integration.spec.js
TST-PFM-SEC-044services-platformmodules/customers/tests/integration/services/persistence/customers.integration.spec.js
TST-PFM-SEC-045services-platformmodules/customers/tests/integration/services/persistence/customers.queries.integration.spec.js
TST-PFM-SEC-046services-platformmodules/security/tests/e2e/access.e2e.spec.js
TST-PFM-SEC-047services-platformmodules/security/tests/e2e/application-access-enforced.e2e.spec.js
TST-PFM-SEC-048services-platformmodules/security/tests/e2e/application-access.e2e.spec.js
TST-PFM-SEC-049services-platformmodules/security/tests/e2e/approved-access.e2e.spec.js
TST-PFM-SEC-050services-platformmodules/security/tests/e2e/built-in-administrator-staff-access.e2e.spec.js
TST-PFM-SEC-051services-platformmodules/security/tests/e2e/console-users.e2e.spec.js
TST-PFM-SEC-052services-platformmodules/security/tests/e2e/definitions.e2e.spec.js
TST-PFM-SEC-053services-platformmodules/security/tests/e2e/derived-assignments.e2e.spec.js
TST-PFM-SEC-054services-platformmodules/security/tests/e2e/eligibility-conditions.e2e.spec.js
TST-PFM-SEC-055services-platformmodules/security/tests/e2e/grant-checks.e2e.spec.js
TST-PFM-SEC-056services-platformmodules/security/tests/e2e/hq-staff-and-roles.e2e.spec.js
TST-PFM-SEC-057services-platformmodules/security/tests/e2e/hq-staff-detail.e2e.spec.js
TST-PFM-SEC-058services-platformmodules/security/tests/e2e/hq-staff-resend.e2e.spec.js
TST-PFM-SEC-059services-platformmodules/security/tests/e2e/hq-tenant-roles.e2e.spec.js
TST-PFM-SEC-060services-platformmodules/security/tests/e2e/invitations.e2e.spec.js
TST-PFM-SEC-061services-platformmodules/security/tests/e2e/licensing.e2e.spec.js
TST-PFM-SEC-062services-platformmodules/security/tests/e2e/power-user-staff-access.e2e.spec.js
TST-PFM-SEC-063services-platformmodules/security/tests/e2e/resource-scoped-grants.e2e.spec.js
TST-PFM-SEC-064services-platformmodules/security/tests/e2e/role-eligibility.e2e.spec.js
TST-PFM-SEC-065services-platformmodules/security/tests/e2e/security-context.e2e.spec.js
TST-PFM-SEC-066services-platformmodules/security/tests/e2e/staff-access.e2e.spec.js
TST-PFM-SEC-067services-platformmodules/security/tests/e2e/staff-separation.e2e.spec.js
TST-PFM-SEC-068services-platformmodules/security/tests/e2e/user-names.e2e.spec.js
TST-PFM-SEC-069services-platformmodules/security/tests/e2e/users.e2e.spec.js
TST-PFM-SEC-070services-platformmodules/security/tests/integration/db/authorizer-flush-job-events.table.integration.spec.js
TST-PFM-SEC-071services-platformmodules/security/tests/integration/db/authorizer-flush-job-steps.table.integration.spec.js
TST-PFM-SEC-072services-platformmodules/security/tests/integration/db/former-users.table.integration.spec.js
TST-PFM-SEC-073services-platformmodules/security/tests/integration/db/role-holders.integration.spec.js
TST-PFM-SEC-074services-platformmodules/security/tests/integration/db/security-definition-integrity.integration.spec.js
TST-PFM-SEC-075services-platformmodules/security/tests/integration/db/security-roles-eligibility.table.integration.spec.js
TST-PFM-SEC-076services-platformmodules/security/tests/integration/db/service-principals.table.integration.spec.js
TST-PFM-SEC-077services-platformmodules/security/tests/integration/db/tenant-portal-onboarding-job-events.table.integration.spec.js
TST-PFM-SEC-078services-platformmodules/security/tests/integration/db/tenant-portal-onboarding-job-steps.table.integration.spec.js
TST-PFM-SEC-079services-platformmodules/security/tests/integration/db/user-display-name.integration.spec.js
TST-PFM-SEC-080services-platformmodules/security/tests/integration/lifecycle/authorizer-flush/authorizer-flush-correlation.integration.spec.js
TST-PFM-SEC-081services-platformmodules/security/tests/integration/lifecycle/authorizer-flush/authorizer-flush-workflow.integration.spec.js
TST-PFM-SEC-082services-platformmodules/security/tests/integration/lifecycle/derived-assignment-nightly/nightly-reconcile.integration.spec.js
TST-PFM-SEC-083services-platformmodules/security/tests/integration/lifecycle/invitation/invitation-arc.integration.spec.js
TST-PFM-SEC-084services-platformmodules/security/tests/integration/lifecycle/user-provisioning/user-provisioning.integration.spec.js
TST-PFM-SEC-085services-platformmodules/security/tests/integration/services/access/access-document.integration.spec.js
TST-PFM-SEC-086services-platformmodules/security/tests/integration/services/access/portal-pool-discovery.integration.spec.js
TST-PFM-SEC-087services-platformmodules/security/tests/integration/services/access/security-context-by-id.integration.spec.js
TST-PFM-SEC-088services-platformmodules/security/tests/integration/services/access/security-context-round-trips.integration.spec.js
TST-PFM-SEC-089services-platformmodules/security/tests/integration/services/access/staff-self-access.integration.spec.js
TST-PFM-SEC-090services-platformmodules/security/tests/integration/services/authorizer-eligibility.integration.spec.js
TST-PFM-SEC-091services-platformmodules/security/tests/integration/services/authorizer-portal-contact.integration.spec.js
TST-PFM-SEC-092services-platformmodules/security/tests/integration/services/authorizer-ports.integration.spec.js
TST-PFM-SEC-093services-platformmodules/security/tests/integration/services/catalog/export-authority.integration.spec.js
TST-PFM-SEC-094services-platformmodules/security/tests/integration/services/catalog/hq-roles.integration.spec.js
TST-PFM-SEC-095services-platformmodules/security/tests/integration/services/catalog/reconcile-catalog.integration.spec.js
TST-PFM-SEC-096services-platformmodules/security/tests/integration/services/catalog/release-manifest-built-ins.integration.spec.js
TST-PFM-SEC-097services-platformmodules/security/tests/integration/services/catalog/staff-access-authority.integration.spec.js
TST-PFM-SEC-098services-platformmodules/security/tests/integration/services/definitions/definition-flush.integration.spec.js
TST-PFM-SEC-099services-platformmodules/security/tests/integration/services/definitions/eligibility-conditions.integration.spec.js
TST-PFM-SEC-100services-platformmodules/security/tests/integration/services/definitions/manage-policies.integration.spec.js
TST-PFM-SEC-101services-platformmodules/security/tests/integration/services/definitions/manage-roles.integration.spec.js
TST-PFM-SEC-102services-platformmodules/security/tests/integration/services/definitions/role-request-scope.integration.spec.js
TST-PFM-SEC-103services-platformmodules/security/tests/integration/services/derived-assignments/reconcile.integration.spec.js
TST-PFM-SEC-104services-platformmodules/security/tests/integration/services/derived-assignments/sign-in-reconcile.integration.spec.js
TST-PFM-SEC-105services-platformmodules/security/tests/integration/services/dev-fixtures/acceptance-administrator.integration.spec.js
TST-PFM-SEC-106services-platformmodules/security/tests/integration/services/dev-fixtures/acceptance-definitions.integration.spec.js
TST-PFM-SEC-107services-platformmodules/security/tests/integration/services/dev-fixtures/acceptance-workspace-access.integration.spec.js
TST-PFM-SEC-108services-platformmodules/security/tests/integration/services/dev-fixtures/content-editor-fixtures.integration.spec.js
TST-PFM-SEC-109services-platformmodules/security/tests/integration/services/dev-fixtures/dev-fixture-tenants.integration.spec.js
TST-PFM-SEC-110services-platformmodules/security/tests/integration/services/dev-fixtures/portal-fixtures.integration.spec.js
TST-PFM-SEC-111services-platformmodules/security/tests/integration/services/dev-fixtures/require-well-known-records.integration.spec.js
TST-PFM-SEC-112services-platformmodules/security/tests/integration/services/dev-fixtures/websites-editor-fixtures.integration.spec.js
TST-PFM-SEC-113services-platformmodules/security/tests/integration/services/dispatch/derived-assignment-reconciles.integration.spec.js
TST-PFM-SEC-114services-platformmodules/security/tests/integration/services/dispatch/pool-account-removals.integration.spec.js
TST-PFM-SEC-115services-platformmodules/security/tests/integration/services/evaluated-route-keys.integration.spec.js
TST-PFM-SEC-116services-platformmodules/security/tests/integration/services/grant-slice-trimming.integration.spec.js
TST-PFM-SEC-117services-platformmodules/security/tests/integration/services/invitations/delete-user.integration.spec.js
TST-PFM-SEC-118services-platformmodules/security/tests/integration/services/invitations/inviter-authority.integration.spec.js
TST-PFM-SEC-119services-platformmodules/security/tests/integration/services/invitations/resend-staff-invitation.integration.spec.js
TST-PFM-SEC-120services-platformmodules/security/tests/integration/services/invitations/resolve-current-user.integration.spec.js
TST-PFM-SEC-121services-platformmodules/security/tests/integration/services/invitations/revoke-lockout.integration.spec.js
TST-PFM-SEC-122services-platformmodules/security/tests/integration/services/membership/amend-grant.integration.spec.js
TST-PFM-SEC-123services-platformmodules/security/tests/integration/services/membership/concurrent-grants.integration.spec.js
TST-PFM-SEC-124services-platformmodules/security/tests/integration/services/membership/console-users.integration.spec.js
TST-PFM-SEC-125services-platformmodules/security/tests/integration/services/membership/effective-permissions.integration.spec.js
TST-PFM-SEC-126services-platformmodules/security/tests/integration/services/membership/grant-history.integration.spec.js
TST-PFM-SEC-127services-platformmodules/security/tests/integration/services/membership/live-grant-migration.integration.spec.js
TST-PFM-SEC-128services-platformmodules/security/tests/integration/services/membership/manage-assignments.integration.spec.js
TST-PFM-SEC-129services-platformmodules/security/tests/integration/services/membership/resource-scopes.integration.spec.js
TST-PFM-SEC-130services-platformmodules/security/tests/integration/services/membership/set-role-scope.integration.spec.js
TST-PFM-SEC-131services-platformmodules/security/tests/integration/services/membership/user-names.integration.spec.js
TST-PFM-SEC-132services-platformmodules/security/tests/integration/services/onboarding/ensure-tenant-portal.integration.spec.js
TST-PFM-SEC-133services-platformmodules/security/tests/integration/services/onboarding/portal-pool-removal.integration.spec.js
TST-PFM-SEC-134services-platformmodules/security/tests/integration/services/onboarding/reserve-portal-pool.integration.spec.js
TST-PFM-SEC-135services-platformmodules/security/tests/integration/services/persistence/assignments.derived.integration.spec.js
TST-PFM-SEC-136services-platformmodules/security/tests/integration/services/persistence/assignments.derived.queries.integration.spec.js
TST-PFM-SEC-137services-platformmodules/security/tests/integration/services/persistence/assignments.eligibility.queries.integration.spec.js
TST-PFM-SEC-138services-platformmodules/security/tests/integration/services/persistence/assignments.grants.queries.integration.spec.js
TST-PFM-SEC-139services-platformmodules/security/tests/integration/services/persistence/assignments.integration.spec.js
TST-PFM-SEC-140services-platformmodules/security/tests/integration/services/persistence/assignments.queries.integration.spec.js
TST-PFM-SEC-141services-platformmodules/security/tests/integration/services/persistence/audit-events.integration.spec.js
TST-PFM-SEC-142services-platformmodules/security/tests/integration/services/persistence/audit-events.queries.integration.spec.js
TST-PFM-SEC-143services-platformmodules/security/tests/integration/services/persistence/authentication-identities.integration.spec.js
TST-PFM-SEC-144services-platformmodules/security/tests/integration/services/persistence/authentication-identities.queries.integration.spec.js
TST-PFM-SEC-145services-platformmodules/security/tests/integration/services/persistence/authorizer-flush-jobs.integration.spec.js
TST-PFM-SEC-146services-platformmodules/security/tests/integration/services/persistence/authorizer-flush-jobs.queries.integration.spec.js
TST-PFM-SEC-147services-platformmodules/security/tests/integration/services/persistence/catalog-releases.integration.spec.js
TST-PFM-SEC-148services-platformmodules/security/tests/integration/services/persistence/catalog-releases.queries.integration.spec.js
TST-PFM-SEC-149services-platformmodules/security/tests/integration/services/persistence/identity-link-sessions.integration.spec.js
TST-PFM-SEC-150services-platformmodules/security/tests/integration/services/persistence/identity-link-sessions.queries.integration.spec.js
TST-PFM-SEC-151services-platformmodules/security/tests/integration/services/persistence/identity-pools.integration.spec.js
TST-PFM-SEC-152services-platformmodules/security/tests/integration/services/persistence/identity-pools.queries.integration.spec.js
TST-PFM-SEC-153services-platformmodules/security/tests/integration/services/persistence/invitations.integration.spec.js
TST-PFM-SEC-154services-platformmodules/security/tests/integration/services/persistence/invitations.queries.integration.spec.js
TST-PFM-SEC-155services-platformmodules/security/tests/integration/services/persistence/permissions.integration.spec.js
TST-PFM-SEC-156services-platformmodules/security/tests/integration/services/persistence/permissions.queries.integration.spec.js
TST-PFM-SEC-157services-platformmodules/security/tests/integration/services/persistence/policies.integration.spec.js
TST-PFM-SEC-158services-platformmodules/security/tests/integration/services/persistence/policies.queries.integration.spec.js
TST-PFM-SEC-159services-platformmodules/security/tests/integration/services/persistence/pool-account-removals.integration.spec.js
TST-PFM-SEC-160services-platformmodules/security/tests/integration/services/persistence/portal-contact-challenges.integration.spec.js
TST-PFM-SEC-161services-platformmodules/security/tests/integration/services/persistence/portal-contact-challenges.queries.integration.spec.js
TST-PFM-SEC-162services-platformmodules/security/tests/integration/services/persistence/roles.eligibility.integration.spec.js
TST-PFM-SEC-163services-platformmodules/security/tests/integration/services/persistence/roles.integration.spec.js
TST-PFM-SEC-164services-platformmodules/security/tests/integration/services/persistence/roles.queries.integration.spec.js
TST-PFM-SEC-165services-platformmodules/security/tests/integration/services/persistence/rules.integration.spec.js
TST-PFM-SEC-166services-platformmodules/security/tests/integration/services/persistence/rules.queries.integration.spec.js
TST-PFM-SEC-167services-platformmodules/security/tests/integration/services/persistence/service-principals.integration.spec.js
TST-PFM-SEC-168services-platformmodules/security/tests/integration/services/persistence/service-principals.queries.integration.spec.js
TST-PFM-SEC-169services-platformmodules/security/tests/integration/services/persistence/staff-access-grants.queries.integration.spec.js
TST-PFM-SEC-170services-platformmodules/security/tests/integration/services/persistence/tenant-portal-onboarding-jobs.integration.spec.js
TST-PFM-SEC-171services-platformmodules/security/tests/integration/services/persistence/tenant-portal-onboarding-jobs.queries.integration.spec.js
TST-PFM-SEC-172services-platformmodules/security/tests/integration/services/persistence/users.integration.spec.js
TST-PFM-SEC-173services-platformmodules/security/tests/integration/services/persistence/users.portal-members.integration.spec.js
TST-PFM-SEC-174services-platformmodules/security/tests/integration/services/persistence/users.queries.integration.spec.js
TST-PFM-SEC-175services-platformmodules/security/tests/integration/services/portal/contact-match.integration.spec.js
TST-PFM-SEC-176services-platformmodules/security/tests/integration/services/provisioning/ensure-founding-staff.integration.spec.js
TST-PFM-SEC-177services-platformmodules/security/tests/integration/services/provisioning/ensure-service-principals.integration.spec.js
TST-PFM-SEC-178services-platformmodules/security/tests/integration/services/provisioning/post-confirmation.integration.spec.js
TST-PFM-SEC-179services-platformmodules/security/tests/integration/services/register-console-pool.integration.spec.js
TST-PFM-SEC-180services-platformmodules/security/tests/integration/services/resolve-grant-slice.integration.spec.js
TST-PFM-SEC-181services-platformmodules/security/tests/integration/services/resource-scoped-gateway.integration.spec.js
TST-PFM-SEC-182services-platformmodules/security/tests/integration/services/security-context/get-security-context.integration.spec.js
TST-PFM-SEC-183services-platformmodules/security/tests/integration/services/security-context/licensed-applications.integration.spec.js
TST-PFM-SEC-184services-platformmodules/security/tests/integration/services/service-principals/hq-service-principals-routes.integration.spec.js
TST-PFM-SEC-185services-platformmodules/security/tests/integration/services/service-principals/registered-principals.integration.spec.js
TST-PFM-SEC-186services-platformmodules/security/tests/integration/services/staff-access/approved-tenant-access.integration.spec.js
TST-PFM-SEC-187services-platformmodules/security/tests/integration/services/staff-access/customer-named-security-routes.integration.spec.js
TST-PFM-SEC-188services-platformmodules/security/tests/integration/services/staff-access/customer-standing-access.integration.spec.js
TST-PFM-SEC-189services-platformmodules/security/tests/integration/services/staff-access/ensure-standing-access.integration.spec.js
TST-PFM-SEC-190services-platformmodules/security/tests/integration/services/staff-access/open-emergency-access.integration.spec.js
TST-PFM-SEC-191services-platformmodules/security/tests/integration/services/staff-access/rhythm-administrator-standing-access.integration.spec.js
TST-PFM-SEC-192services-platformmodules/security/tests/integration/services/staff-access/staff-customer-administration.integration.spec.js
TST-PFM-SEC-193services-platformmodules/security/tests/integration/services/staff-access/staff-member-access-grants.integration.spec.js
TST-PFM-SEC-194services-platformmodules/security/tests/unit/authorizer/authorize.spec.ts
TST-PFM-SEC-195services-platformmodules/security/tests/unit/authorizer/authorizer-source.spec.ts
TST-PFM-SEC-196services-platformmodules/security/tests/unit/authorizer/registry-manifest.spec.ts
TST-PFM-SEC-197services-platformmodules/security/tests/unit/authorizer/registry-publish.spec.ts
TST-PFM-SEC-198services-platformmodules/security/tests/unit/authorizer/service-function-rules.spec.ts
TST-PFM-SEC-199services-platformmodules/security/tests/unit/services/access/security-context.spec.ts
TST-PFM-SEC-200services-platformmodules/security/tests/unit/services/catalog/catalog-plan.spec.ts
TST-PFM-SEC-201services-platformmodules/security/tests/unit/services/catalog/export-authority.spec.ts
TST-PFM-SEC-202services-platformmodules/security/tests/unit/services/catalog/reconcile-catalog.spec.ts
TST-PFM-SEC-203services-platformmodules/security/tests/unit/services/catalog/staff-access-authority.spec.ts
TST-PFM-SEC-204services-platformmodules/security/tests/unit/services/identity/link-cognito-identity.spec.js
TST-PFM-SEC-205services-platformmodules/security/tests/unit/services/invitations/accept-invitation.spec.js
TST-PFM-SEC-206services-platformmodules/security/tests/unit/services/invitations/activate-user.spec.js
TST-PFM-SEC-207services-platformmodules/security/tests/unit/services/invitations/google-acceptance.spec.js
TST-PFM-SEC-208services-platformmodules/security/tests/unit/services/invitations/invitation-email.spec.js
TST-PFM-SEC-209services-platformmodules/security/tests/unit/services/invitations/invitation-summary.spec.js
TST-PFM-SEC-210services-platformmodules/security/tests/unit/services/invitations/invite-user.spec.js
TST-PFM-SEC-211services-platformmodules/security/tests/unit/services/invitations/resend-invitation.spec.js
TST-PFM-SEC-212services-platformmodules/security/tests/unit/services/invitations/suspend-revoke.spec.js
TST-PFM-SEC-213services-platformmodules/security/tests/unit/services/invitations/widening.spec.ts
TST-PFM-SEC-214services-platformmodules/security/tests/unit/services/persistence/permission-matcher.spec.ts
TST-PFM-SEC-215services-platformmodules/security/tests/unit/services/persistence/rule-validation.spec.ts
TST-PFM-SEC-216services-platformmodules/security/tests/unit/services/portal/candidate-token.spec.ts
TST-PFM-SEC-217services-platformmodules/security/tests/unit/services/portal/contact-match-rules.spec.ts
TST-PFM-SEC-218services-platformmodules/security/tests/unit/services/portal/portal-identity.spec.ts
TST-PFM-SEC-219services-platformmodules/security/tests/unit/services/portal/verification-code-sender.spec.ts
TST-PFM-SEC-220services-platformmodules/tenants/tests/e2e/hq-tenant-loading.e2e.spec.js
TST-PFM-SEC-221services-platformmodules/tenants/tests/e2e/hq-tenant-shortcuts.e2e.spec.js
TST-PFM-SEC-222services-platformmodules/tenants/tests/e2e/hq-tenants.e2e.spec.js
TST-PFM-SEC-223services-platformmodules/tenants/tests/e2e/tenant-availability-gate.e2e.spec.js
TST-PFM-SEC-224services-platformmodules/tenants/tests/e2e/tenant-deletion-recovery.e2e.spec.js
TST-PFM-SEC-225services-platformmodules/tenants/tests/e2e/tenant-deletion-requests.e2e.spec.js
TST-PFM-SEC-226services-platformmodules/tenants/tests/e2e/tenant-email-sender.e2e.spec.js
TST-PFM-SEC-227services-platformmodules/tenants/tests/e2e/tenant-hubspot-link.e2e.spec.js
TST-PFM-SEC-228services-platformmodules/tenants/tests/e2e/tenant-provisioning-alerts.e2e.spec.js
TST-PFM-SEC-229services-platformmodules/tenants/tests/e2e/tenant-provisioning.e2e.spec.js
TST-PFM-SEC-230services-platformmodules/tenants/tests/e2e/tenants.e2e.spec.js
TST-PFM-SEC-231services-platformmodules/tenants/tests/integration/db/tenant-declaration-completeness.integration.spec.js
TST-PFM-SEC-232services-platformmodules/tenants/tests/integration/db/tenants.table.integration.spec.js
TST-PFM-SEC-233services-platformmodules/tenants/tests/integration/lifecycle/reconciled-job-failure.integration.spec.js
TST-PFM-SEC-234services-platformmodules/tenants/tests/integration/services/default/get-default-tenant.integration.spec.js
TST-PFM-SEC-235services-platformmodules/tenants/tests/integration/services/deletion/begin-destruction.integration.spec.js
TST-PFM-SEC-236services-platformmodules/tenants/tests/integration/services/deletion/deletion-holds.integration.spec.js
TST-PFM-SEC-237services-platformmodules/tenants/tests/integration/services/deletion/request-deletion.integration.spec.js
TST-PFM-SEC-238services-platformmodules/tenants/tests/integration/services/deletion/tenant-deletion-schedule.integration.spec.js
TST-PFM-SEC-239services-platformmodules/tenants/tests/integration/services/deletion/tenant-purge-functions.integration.spec.js
TST-PFM-SEC-240services-platformmodules/tenants/tests/integration/services/deletion/tenant-purge-recovery.integration.spec.js
TST-PFM-SEC-241services-platformmodules/tenants/tests/integration/services/deletion/tenant-purge.integration.spec.js
TST-PFM-SEC-242services-platformmodules/tenants/tests/integration/services/lifecycle/first-administrator.integration.spec.js
TST-PFM-SEC-243services-platformmodules/tenants/tests/integration/services/persistence/staff-tenant-shortcuts.integration.spec.js
TST-PFM-SEC-244services-platformmodules/tenants/tests/integration/services/persistence/staff-tenant-shortcuts.queries.integration.spec.js
TST-PFM-SEC-245services-platformmodules/tenants/tests/integration/services/persistence/tenant-deletion-requests.integration.spec.js
TST-PFM-SEC-246services-platformmodules/tenants/tests/integration/services/persistence/tenant-deletion-requests.queries.integration.spec.js
TST-PFM-SEC-247services-platformmodules/tenants/tests/integration/services/persistence/tenant-deletion-schedule-jobs.queries.integration.spec.js
TST-PFM-SEC-248services-platformmodules/tenants/tests/integration/services/persistence/tenant-provisioning-jobs.queries.integration.spec.js
TST-PFM-SEC-249services-platformmodules/tenants/tests/integration/services/persistence/tenant-purge-jobs.queries.integration.spec.js
TST-PFM-SEC-250services-platformmodules/tenants/tests/integration/services/persistence/tenant-reset-jobs.queries.integration.spec.js
TST-PFM-SEC-251services-platformmodules/tenants/tests/integration/services/persistence/tenant-resources.integration.spec.js
TST-PFM-SEC-252services-platformmodules/tenants/tests/integration/services/persistence/tenant-seed-applications.integration.spec.js
TST-PFM-SEC-253services-platformmodules/tenants/tests/integration/services/persistence/tenants.integration.spec.js
TST-PFM-SEC-254services-platformmodules/tenants/tests/integration/services/persistence/tenants.queries.integration.spec.js
TST-PFM-SEC-255services-platformmodules/tenants/tests/integration/services/provisioning/initialize-tenant.integration.spec.js
TST-PFM-SEC-256services-platformmodules/tenants/tests/integration/services/provisioning/provision-existing-tenant.integration.spec.js
TST-PFM-SEC-257services-platformmodules/tenants/tests/integration/services/provisioning/provision-tenant.development-licences.integration.spec.js
TST-PFM-SEC-258services-platformmodules/tenants/tests/integration/services/provisioning/provision-tenant.integration.spec.js
TST-PFM-SEC-259services-platformmodules/tenants/tests/integration/services/provisioning/provisioning-notices.integration.spec.js
TST-PFM-SEC-260services-platformmodules/tenants/tests/integration/services/provisioning/repair-stranded-provisioning.integration.spec.js
TST-PFM-SEC-261services-platformmodules/tenants/tests/integration/services/provisioning/tenant-email-strategy.integration.spec.js
TST-PFM-SEC-262services-platformmodules/tenants/tests/integration/services/provisioning/tenant-hubspot-link.integration.spec.js
TST-PFM-SEC-263services-platformmodules/tenants/tests/integration/services/reset/reset-tenant.integration.spec.js
TST-PFM-SEC-264services-platformmodules/tenants/tests/unit/aws/api/hq-tenant-list-mapper.spec.ts
TST-PFM-SEC-265services-platformmodules/tenants/tests/unit/aws/api/tenant-provisioning-mapper.spec.ts
TST-PFM-SEC-266services-platformmodules/tenants/tests/unit/services/access/tenant-availability.spec.js

Area Authorization Roles ​

| ROLE-PFM-001 | Administrator | | ROLE-PFM-002 | Power User | | ROLE-PFM-003 | Standard User | | ROLE-PFM-004 | Read Only | | ROLE-PFM-005 | Portal Member | | ROLE-PFM-006 | Support Representative | | ROLE-PFM-007 | Software Engineer | | ROLE-PFM-008 | Rhythm Administrator |

Control Gap Allocations ​

| FND-PFM-SEC-058 | TC-LOG-001, TC-PI-005 | FND-PFM-SEC-003 | | FND-PFM-SEC-059 | TC-PI-003 | FND-PFM-SEC-004 | | FND-PFM-SEC-060 | TC-AVL-004, TC-PI-004 | FND-PFM-SEC-037 | | FND-PFM-SEC-061 | TC-PI-002, TC-PI-003, TC-IAM-004 | FND-PFM-SEC-052 | | FND-PFM-SEC-062 | TC-PI-003 | FND-PFM-SEC-054 | | FND-PFM-SEC-063 | TC-PI-002, TC-PI-003 | FND-PFM-SEC-055 | | FND-PFM-SEC-064 | TC-LOG-005, TC-LOG-003 | FND-PFM-SEC-056 | | FND-PFM-SEC-065 | TC-IAM-003 | Optional second factor in the console identity pool |

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.

Rhythm Software