Status. Proposed design only. Nothing in this vault is GGA client approval. The GGA client documents are supplied drafts: see GGA-Source-Digest. No application, service or test has been executed; every scenario is Not executed. Delivery fees and dates are open.
T02 · Fixed roles cannot be bypassed through the API
| Field | Value |
|---|---|
| Status | Not executed |
| Type | Balanced software |
| Layer / kind | Unit · API · E2E |
| Priority | P0 |
| Gates | A04, A09 |
| Build step | 03 (GGA order; the 1.3 step is history) |
| Decisions | Q02 |
Disposition under GGA
| Field | Value |
|---|---|
| Disposition | Retained and refined |
| GGA basis | Blueprint pp. 3, 13, 17 (GGA-Requirement-Register) |
| Replaced or carried by | GS17-staged |
| Still open | GQ03-staged |
| What changes | Fixed roles become the Blueprint role set (visitor, registered company, eligible owner or colleague, partner, operations, finance, technical administrator, convener). Server-side checks on every request stay. |
The 1.3 text below is kept verbatim as history. Where the disposition is Reframed, Superseded or Parked it is not the GGA oracle; use the replacing scenario. A Parked scenario has no GGA feedback and stays a Proposed carry-forward. The status stays Not executed. Register: Scenario-Dispositions.
Given
Owner/admin, approver, contributor, viewer and unassigned users exist in A. A contributor owns an assigned draft.
When
For every mutation, invoke the server directly under each role; include publish, formal EOI submit, accept, message, assign and team changes.
Then / oracle
Only the signed role/assignment matrix succeeds. Contributor cannot self-authorise publishing or formal interest; viewer cannot mutate. Rejected requests leave business, approval and notification state unchanged.
Evidence required
Parameterized allow/deny matrix with positive controls; before/after rows; audit of sensitive attempts.
Decision dependency (verbatim)
Q02: exact role, assignment and self-approval matrix.
Source: TDD rev 1.3 (PDF); machine-readable in 10-Sources/tdd-bundle/. Back to Scenario-Index · Traceability-Matrix · integration dependencies in Dependency-and-Regression-Table.