Roles
0
Identity · authorization · least privilege
Authorization RBAC Readiness
Public-safe mobile view of the LMS role and capability model. It shows least-privilege policy, negative-test coverage, and deployment status without exposing learner records, staff identities, reviewer identities, credentials, or private authorization claims.
production_identity_ready=false · production_backend_ready=false · public_release=false · school_opening_ready=false
Capabilities
0
Deny rules
0
Live rows
0
Authorization remains contract-only
Role policy is mapped, but no production identity provider, live sessions, role claims, accounts, or enforcement evidence exists yet. Every privileged capability must deny by default until verified identity, named scoped authority, backend enforcement, audit logging, and negative tests pass.
Role boundaries
Authorization counters
Matrix rows: 0. Allow-scoped rows: 0. Deny rows: 0. Negative tests required: 0. Live enforcement rows: 0.