Security and Access Control¶
Target
This page describes intended behaviour or structure. No implementation is claimed unless a section is explicitly marked Current implementation or Evidence.
Filled 2026-10-09
This page was empty. It maps onto the final-state Security Center and Admin / Settings modules and the prototype's Security, Tenant Isolation Lab and Admin destinations. Requirements: FUX-01 (trusted scope, permissions, safe scope changes), FUX-12 (honest readiness).
Views¶
| View | Shows | Authority |
|---|---|---|
| Membership and roles | Who belongs to the organization, workspace/project; Factory roles (requester, reviewer, asset maintainer, operator, workspace admin, platform admin, observer — decided 2026-10-09, ADR-0015); delegation | Canonical Identity Service (ADR-0101) for accounts and memberships; Factory role mapping in Control plane |
| Scope switch | Current organization/project/environment; switching with unsaved work; never reveals other tenants' objects | Trusted session scope (tenancy and scope) |
| Integrations and credentials | Connections with endpoint policy, credential references (never values), grants, rotation metadata | Capability & Tools BC-16 |
| Findings | Security findings, policy violations, dependency and secret scanning results, remediation state | Trust & Operations BC-19 |
| Sensitive actions | Step-up MFA requirements (amr/acr), separation-of-duties conflicts, emergency access with expiry |
Canonical ADR-0101; Trust & Operations BC-20 |
Rules¶
- The console never issues tokens, stores credentials or decides authorization; it submits commands to the owners and renders their decisions.
- Denied actions explain the permitted next step without disclosing closed data.
- A tenant selector grants nothing (canonical ADR-0100).
Current implementation¶
Identity and Authorization Server templates exist and run in DerechHaLev; no Factory role model, admin console or findings projection exists; the prototype's security views are fixtures. Label: Simulated.