Portal navigation menu
The vault portal carries a left-side menu of clickable icons leading to
its work surfaces: uploading documents, document statistics and the
query page for everyone signed in; the audit view where the deployment
opens it; compartment administration for an administrator or a delegated
compartment administrator; and — for administrators only — inviting new
users, the user list, and checking the vault's sent email. What the menu shows is decided by the vault
server-side, per session: an administrator session gets every entry, a
member session never sees the administrative ones, and whatever a
browser chooses to render, every administrative operation is re-checked
and refused by the vault itself.
An anonymous visitor is nobody to the vault
- Given the vault portal is running without any signed-in session
- When an anonymous visitor asks the vault who they are
- Then the vault refuses to say anything at all
The vault recognizes an administrator sessionstack
- Given a running vault with an administrator and a member signed in
- When the administrator asks the vault who they are
- Then the vault answers that they are an administrator
A member gets no administrative menu and no administrative powerstack
- Given a running vault with an administrator and a member signed in
- When the member asks the vault who they are
- Then the vault answers that they are not an administrator
- And the user-administration workflow refuses the member with no detail