From 5a4a908427cdede6b930229a2e9d9a534ca8a06a Mon Sep 17 00:00:00 2001 From: tegwick Date: Tue, 28 Jul 2026 01:32:25 +0200 Subject: [PATCH] Record tenant administration UI evidence --- ...020-self-service-and-user-administration-portal.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md index a86ef7f..4088b79 100644 --- a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md +++ b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md @@ -106,6 +106,14 @@ inspect cross-tenant lifecycle gaps, and perform explicitly authorized recovery actions. Prove ordinary users and tenant admins cannot reach platform or other-tenant data. +2026-07-28 implementation evidence: the deployed admin surface lists +tenant-scoped members, creates the user and approved role as a separate +auditable step, provisions the login through the provider-neutral adapter, +persists the external subject link, and suspends/reactivates both LLDAP login +and the tenant account. Browser mutations require an OIDC session and +per-session CSRF token. Platform tenant creation, invitation/recovery breadth, +removal, and full cross-tenant conformance remain. + ## T05 - Add production persistence and operability ```task @@ -142,6 +150,9 @@ proved first create, replay/resume, tenant group projection, and cleanup through the restricted deployment path. The complete browser, authorization, failure, accessibility, and restore matrix remains. +The admin increment adds explicit regression coverage for missing/wrong CSRF, +required API idempotency, provider-link persistence, and suspension calls. + ## T07 - Binky production acceptance ```task