Skip to content

CON-PFM-SEC-001Customer

Markdown

CON-PFM-SEC-001

Customer

Markdown
  • DocumentDraft
  • Product intentConfirmed
  • ImplementationObserved

Planning

Feature
FEAT-PFM-SEC-01
Owned by
MOD-PFM-SEC
Acted on by
CAP-PFM-SEC-001, CAP-PFM-SEC-002, CAP-PFM-SEC-003, CAP-PFM-SEC-017
Visible to
ACT-PFM-001, ACT-PFM-004, ACT-PFM-005
Not to be confused with
Workspace, CRM organization, Licence

Design

Specified by
DOM-PFM-SEC-001

KindKey conceptProduct areaPlatformModuleSecurity, Customers and WorkspacesRevision1

Read atservices-platform ad3f6a65react-console baf6dae3

The Formal Contract

The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.

Definition
A customer represents the paying organization and the administrative boundary for its console accounts, with zero or more workspaces beneath it.
Synonyms
paying organizationaccount (commercial)

Relationships

ToStatementProvenance
CON-PFM-SEC-002A customer may own several workspaces or none; each workspace has one customer.test
services-platform:modules/customers/tests/integration/db/customers.table.integration.spec.js#refuses deleting a customer that tenants still reference by tenants_customer_fk
CON-PFM-SEC-003Console membership belongs to one customer, so membership elsewhere uses another account.documented
CON-PFM-SEC-003Custom definitions remain customer-owned, while built-in roles and policies are shared.test
services-platform:modules/security/tests/e2e/definitions.e2e.spec.js#lists the customer's own policies beside Rhythm's, each with the reference a client sends back
CON-PFM-SEC-003Rhythm Administrators receive standing customer access outside Rhythm’s own customer.test
services-platform:modules/security/tests/integration/services/staff-access/rhythm-administrator-standing-access.integration.spec.js#gives each Rhythm Administrator one active customer-level standing grant in every customer but Rhythm’s own

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.