Vault portal
The web portal is a thin window onto the vault's one gated door. It
refuses service entirely when it is not configured, explains nothing
when the vault denies, and files or finds documents only within the
compartments the signed-in member can actually reach.
An unconfigured vault refuses portal service
- Given a vault deployment with no portal configuration
- When a visitor asks the portal to search
- Then the portal refuses service entirely
A denial explains nothing
- Given a portal whose vault denies its visitor
- When the visitor asks the portal to search
- Then the answer is a bare denial with no reason attached
A member uploads a report and finds it by searchingstack
- Given a signed-in vault member with their own compartment
- When they upload a report through the portal
- And they search the portal for the report's subject
- Then the report is among the results
Filing into someone else's compartment is refusedstack
- Given a signed-in vault member with their own compartment
- And a compartment the member cannot write into
- When they upload a report aimed at that other compartment
- Then the upload is denied
- And searching finds no trace of the report