Skip to content

CON-PFM-SEC-002Workspace

Markdown

CON-PFM-SEC-002

Workspace

Markdown
  • DocumentDraft
  • Product intentConfirmed
  • ImplementationObserved

Planning

Feature
FEAT-PFM-SEC-01
Owned by
MOD-PFM-SEC
Acted on by
CAP-PFM-SEC-002, CAP-PFM-SEC-003, CAP-PFM-SEC-004, CAP-PFM-SEC-007, CAP-PFM-SEC-019
Visible to
ACT-PFM-001, ACT-PFM-002, ACT-PFM-004, ACT-PFM-005, ACT-PFM-006
Not to be confused with
Customer, Website or site, Sandbox data copy

Design

Specified by
DOM-PFM-SEC-002

KindKey conceptProduct areaPlatformModuleSecurity, Customers and WorkspacesRevision1

Read atservices-platform ad3f6a65react-console baf6dae3

The Formal Contract

The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.

Definition
A workspace holds an association’s operational records, with staff-controlled business status and system-controlled readiness and retirement.
Synonyms
association’s workspaceorganization (in screens)

Relationships

ToStatementProvenance
CON-PFM-SEC-001Each workspace has one customer, shared by any production parent and its sandbox.test
services-platform:modules/tenants/tests/integration/db/tenants.table.integration.spec.js#refuses a sandbox whose parent belongs to another customer
CON-PFM-SEC-003A role assignment can apply within one workspace or throughout the owning customer.test
services-platform:modules/security/tests/integration/services/membership/set-role-scope.integration.spec.js#turns the customer grant into one active grant per tenant asked for, revoking the customer grant
CON-PFM-SEC-003Staff access addresses a workspace, with standing access able to address the customer.documented
services-platform:docs/hq/rhythm-hq-plan.md#D2. Staff access to customer tenants
CON-PFM-SEC-003Portal membership belongs to a workspace and its registered sign-in pool.test
services-platform:modules/security/tests/integration/services/provisioning/post-confirmation.integration.spec.js#creates the member, active and verified, in the pool’s tenant under the account’s own id

Lifecycle

StateMeaningHow it changes
provisioningParticipating services are preparing the workspace, so ordinary use is unavailable.Provisioning begins from a staff request.
provisioning failedPreparation failed and retains the partial work for inspection.A failed job enters this state; staff can request retry or retirement.
activeOrdinary use is available when business status permits it.Successful provisioning, import activation or deletion cancellation restores this state.
loadingInitial migration work runs while ordinary use is unavailable.Staff open loading and later activate the prepared workspace.
deletion pendingA disabled workspace waits for deletion and remains cancellable.Requesting deletion enters this state; cancellation returns it to active.
deletingDestruction is underway, cancellation is no longer possible and staff actions are read-only.Passing the destruction checks enters this state; successful purge removes the workspace.

The Markdown files under specs/ in rhythmsoftware/rhythm-v2-docs are the canonical source of truth. This reader is a generated, read-only projection of them.