The narrative above explains; the sections below are authoritative — the rules, scenarios and tests this document binds.
| # | Surface | Action | Capability | Expected | Provenance |
|---|---|---|---|---|---|
| 1 | requestHqTenantAccess | Request two days of Read Only from HQ with the support reason. | CAP-PFM-SEC-017 | The backend stores a waiting request without granting access and returns its notification outcome. | test services-platform:modules/security/tests/e2e/approved-access.e2e.spec.js#takes the request, 200, answering it waiting for a decision with the names of what it would reach |
| 2 | /console/{tenantId}/security/rhythmAccess | Approve the request as an authorized customer security administrator. | CAP-PFM-SEC-017 | The backend activates the grant for the approved duration within the request limit. | test services-platform:modules/security/tests/e2e/approved-access.e2e.spec.js#approves it, 200, for the days the administrator chose |
| 3 | /console/{tenantId} | Enter the workspace through HQ. | CAP-PFM-SEC-007 | The mock console displays the staff-access banner on workspace entry. | test react-console:e2e/mock/hq-lists.mock.spec.ts#End Access ends the grant and returns to HQ; the tenant then asks for access again |
| 4 | revokeTenantStaffAccess | Revoke the grant as the customer administrator. | CAP-PFM-SEC-017 | The backend revokes it and fresh context evaluation no longer reports reach; existing cached authority can persist. | test services-platform:modules/security/tests/e2e/approved-access.e2e.spec.js#takes the access away again when the administrator revokes it |
| Path | From step | Condition | Path taken | Outcome | Provenance |
|---|---|---|---|---|---|
| alternate | 1 | An incident requires the emergency path. | Open a valid emergency grant with Rhythm Administrator authority. | The backend returns the opened grant and notification outcome. | test services-platform:modules/security/tests/e2e/staff-access.e2e.spec.js#opens the grant, 200, answering it with the names of what it reaches and the notice’s outcome |
| alternate | 3 | The staff member already holds standing access. | Enter through that standing grant. | The mock entry uses no emergency dialog and shows a banner without an expiry. | test react-console:e2e/mock/hq-lists.mock.spec.ts#a standing grant (no expiry) enters with no dialog, and the banner names no end |
| failure | 2 | A Power User attempts to decide the request. | Reject the decision for missing staff-access authority. | The request remains waiting. | test services-platform:modules/security/tests/e2e/power-user-staff-access.e2e.spec.js#leaves the request waiting after the Power User’s refused decisions |
| failure | 3 | Staff attempt entry before any access is granted. | The mock console offers the emergency-access dialog. | That mock establishes dialog behavior, while staff-role authorization is established by backend emergency tests. | test react-console:e2e/mock/hq-lists.mock.spec.ts#without a grant asks for emergency access, validates it, then switches in with only the tenant's navigation |
| Id | Statement | Provenance |
|---|---|---|
01 | A waiting request does not appear as reachable workspace access in fresh evaluation. | test services-platform:modules/security/tests/e2e/approved-access.e2e.spec.js#grants the staff member nothing while the request is waiting |
02 | Approval introduces the grant into fresh reachable-access evaluation. | test services-platform:modules/security/tests/e2e/approved-access.e2e.spec.js#is what lets the staff member into the tenant, and only then |
03 | Customer revocation removes that reach from a fresh context; it does not prove immediate gateway-cache eviction. | test services-platform:modules/security/tests/e2e/approved-access.e2e.spec.js#takes the access away again when the administrator revokes it |
End-to-end policy: required: The intended journey connects a staff operator in HQ with an administrator in the customer’s Security area. Backend grants and mock banners provide separate evidence; a real browser journey must establish their combined behavior.