Platform
Support access
Kind: A platform service both lanes stand on.
Availability
ShippedLive on this deployment: it needs nothing more to run.
- Door
/dashboard/security · /api/support-access- Unlocks with
- Nothing: it runs for every account.
Every status follows one rule from this deployment's own configuration: a capability is marked shipped only when everything it needs is in place.
What it does
Platform administrators reach a customer's matters and documents only under a recorded support-access grant; a request waits for the customer's approval, and an emergency grant is recorded and announced to the customer unless a legal hold requires silence.
Keep in mind
An administrator without a grant reads none of a firm's matters or documents.
What it refuses
| Answer | HTTP | Meaning |
|---|---|---|
unauthorized | 401 | No session: sign in first; nothing was read or saved. |
- Answer
unauthorized- HTTP
- 401
- Meaning
- No session: sign in first; nothing was read or saved.
What can leave EstateDraft
Each action that can reach outside EstateDraft is declared in one registry with the channel it uses; the outbox refuses an action that is not declared.
- Notice · in-app
support-access.decision-bell - Notice · in-app
support-access.request-bell
Evidence
src/lib/support-access.test.tssrc/lib/rls-suite-coverage.test.tssrc/lib/support-access.ts
Reviewed: