The suite follows staff administration and customer-approved support entry while keeping service-principal management visible. It tests the separate authority needed for each privileged operation.
Changing staff membership affects standing customer entry, but staff status does not itself approve a customer request. Release reconciliation and status replay must preserve deliberate suspensions and revocations. The interaction rows identify the participating capabilities and the detailed proofs they assume. A complete feature chain needs its own executable evidence even when its individual outcomes already have bindings.
A staff reader and a Rhythm Administrator have active staff memberships.
Steps
[object Object]
Expected
HQ operations follow staff keys and the entry request supplies no customer authority.
Data
A disposable customer and workspace with run-owned memberships, assignments and definitions; clock-controlled expiry fixtures where needed.
Source
services-platform:modules/security/tests/e2e/hq-staff-and-roles.e2e.spec.js#refuses an administrator of a customer, holding every key at that customer, as 403,services-platform:modules/security/tests/e2e/approved-access.e2e.spec.js#refuses a request for more days than the maximum, 400,services-platform:modules/security/tests/integration/services/service-principals/hq-service-principals-routes.integration.spec.js#answers a staff reader 200 with every principal, this suite’s among them with its kind and status
02Suspending staff ends the access attached to their staff roleinteractionnegativeproposed
A customer administrator receives a support request from identified Rhythm staff.
Steps
[object Object]
Expected
The grant and matching assignment agree; revocation ends customer work while the staff identity remains known.
Data
A disposable customer and workspace with run-owned memberships, assignments and definitions; clock-controlled expiry fixtures where needed.
Source
services-platform:modules/security/tests/e2e/hq-staff-and-roles.e2e.spec.js#refuses an administrator of a customer, holding every key at that customer, as 403,services-platform:modules/security/tests/integration/services/staff-access/approved-tenant-access.integration.spec.js#gives the two days that were asked for, not the thirty the approver named,services-platform:modules/security/tests/integration/services/staff-access/approved-tenant-access.integration.spec.js#revokes the assignment the grant materialized, so the access is gone at once,services-platform:modules/security/tests/e2e/approved-access.e2e.spec.js#grants the staff member nothing while the request is waiting
04Missing staff management keys do not follow from staff statuspermissionproposed
Support Representative and Rhythm Administrator identities are available.
Steps
[object Object]
Expected
Only the separate required management keys permit these privileged acts.
Data
A disposable customer and workspace with run-owned memberships, assignments and definitions; clock-controlled expiry fixtures where needed.
Source
services-platform:modules/security/tests/e2e/hq-staff-and-roles.e2e.spec.js#refuses an administrator of a customer, holding every key at that customer, as 403,services-platform:modules/security/tests/integration/services/staff-access/open-emergency-access.integration.spec.js#refuses a reason shorter than twenty characters,services-platform:modules/security/tests/integration/services/service-principals/hq-service-principals-routes.integration.spec.js#answers a staff reader 200 with every principal, this suite’s among them with its kind and status
05Repeated deployment and status calls preserve existing decisionsregressionnegativeproposed
A founder is suspended, a standing grant is manually revoked, and a service principal is suspended.
Steps
[object Object]
Expected
Reconciliation does not silently reactivate those identities or recreate the manually revoked entry; status replay adds no change event.
Data
A disposable customer and workspace with run-owned memberships, assignments and definitions; clock-controlled expiry fixtures where needed.
Source
services-platform:modules/security/tests/integration/services/provisioning/ensure-founding-staff.integration.spec.js#answers the first run as created,services-platform:modules/security/tests/integration/services/staff-access/rhythm-administrator-standing-access.integration.spec.js#gives each Rhythm Administrator one active customer-level standing grant in every customer but Rhythm’s own,services-platform:modules/security/tests/integration/services/service-principals/hq-service-principals-routes.integration.spec.js#records the suspension: the staff member, Rhythm’s customer, narrowing, from active to suspended,services-platform:modules/security/tests/integration/services/provisioning/ensure-service-principals.integration.spec.js#answers both as inserted, and none unchanged