STORY · RBAC for onboarding + scanner data (breakpilot-platform RBAC) #190

Open
opened 2026-07-16 22:16:33 +00:00 by sharang · 0 comments
Owner

As a platform admin I want Certifai onboarding and findings gated by the
breakpilot-platform RBAC so that access follows the platform's
roles / permissions / tenancy.

Part of #186. Depends on the Next.js onboarding story.

Acceptance criteria

  • The Next.js onboarding and the agent API enforce breakpilot-platform RBAC.
  • Multi-tenant isolation preserved (existing t_<tenant>_dev DB model).
  • Role→capability mapping documented (who can onboard / scan / view findings).
**As a** platform admin **I want** Certifai onboarding and findings gated by the **breakpilot-platform RBAC** **so that** access follows the platform's roles / permissions / tenancy. Part of #186. Depends on the Next.js onboarding story. ## Acceptance criteria - [ ] The Next.js onboarding and the agent API enforce breakpilot-platform RBAC. - [ ] Multi-tenant isolation preserved (existing `t_<tenant>_dev` DB model). - [ ] Role→capability mapping documented (who can onboard / scan / view findings).
sharang added the enhancementonboarding labels 2026-07-16 22:16:33 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: sharang/compliance-scanner-agent#190