Skip to main content

← Back to parent Epic

MAZENG-FT-52 · Enforced administrator access boundary

Feature intent

Administrators need cross-user, commercial, and operational information, but ordinary users must be denied even through direct URLs or API calls.

Why it matters

Administrators need cross-user, commercial, and operational information, but ordinary users must be denied even through direct URLs or API calls.

Expected outcome

Sensitive administration capabilities remain limited to current, explicit administrators with auditable enforcement.

In scope

  • Defense-in-depth administrator navigation and page visibility.
  • Independent server authorization for every administrative endpoint.
  • Immediate entitlement changes and auditable authorization outcomes.
Delivery status
IN_BACKLOG
Owner
RootAtSkic (product lead)
Parent Epic
MAZENG-EP-14
Solution approval
PENDING

Acceptance

Acceptance outcomes

  1. 01

    Ordinary users cannot see administrator navigation or pages.

  2. 02

    Direct URL and API access fail closed unless current administrator status is verified server-side.

  3. 03

    Administrator entitlement changes take effect immediately and are covered by tests.

  4. 04

    Authorization outcomes are auditable without exposing unnecessary user data.

Dependencies and risks

Dependencies

None recorded.

Risks

  • Frontend redirects are not an authorization boundary.
  • Legacy user-table loading begins before client-side redirect.
  • Legacy guard attaches a full user object, requiring a least-data review.

Authoritative Architecture tasks

No authoritative Architecture tasks are linked.

Original source