Frontier model A

Trial · access-module-permissions

← access-module-permissions
Outcome
PASS24m
Reward
100.0%
Checks passed
55 / 55
Runtime
24m 27s
Harness
Cursor CLI
Task version
v3.1.2

Checks

CheckResultCreditWeight
baseline: an admin session reads sites and access principalsPASS100%1%
baseline: a member session resolves to its access principalPASS100%1%
equipment: grid cell, bulk edit, bulk add, delete, duplicate, redistribute, EAI import and App Allocation writes need Equipment EditPASS100%6%
sites: site create, duplicate, edit, delete, layout and equipment-meta writes need Sites EditPASS100%5%
sites: phase create, edit, delete and duplicate need Sites EditPASS100%4%
lineups: library lineup create, duplicate, edit, delete and canvas writes need Lineups EditPASS100%4%
allocation: demand buckets, done projects, starting and committing a run need Allocation EditPASS100%7%
deal pipeline: grid cell edits need Deal Pipeline EditPASS100%4%
purchase orders: grid cell edits need Purchase Orders EditPASS100%3%
settings: equipment catalog and item master writes need Settings EditPASS100%4%
settings: pricing assumption and supplier writes need Settings EditPASS100%4%
ownership: phase lineup plans belong to Sites, not LineupsPASS100%4%
ownership: a lineup's writes follow its scope (phase instance to Sites, library to Lineups)PASS100%4%
ownership: a wildcard module grant with a View exception is view-only on that modulePASS100%3%
ownership: a module grant held through an email domain decides writes, and an exact-email principal overrides its domainPASS100%3%
version history: viewing refuses members without unrestricted site and data view, whatever their email domainPASS100%4%
version history: restore needs the Restore versions grantPASS100%4%
version history: restore needs Settings EditPASS100%3%
version history: restore no longer follows the email domainPASS100%4%
version history: restore also needs the viewing requirementPASS100%2%
version history: the Restore versions grant is assignable in Access settingsPASS100%3%
version history: every existing member receives the Restore versions grantPASS100%4%
version history: the version list's canRestore follows the restore rulePASS100%2%
ui: the Lineups page, a library lineup and a phase's own lineup read as read-only on View of their owning module and stay editable on EditPASS100%3%
ui: the Sites page reads as read-only on Sites View and stays editable on Sites EditPASS100%2%
ui: a phase's lineup plan reads as read-only on the Sites and Deal Pipeline pages when its writes are refused and stays editable when they are allowedPASS100%2%
ui: the Equipment, Deal Pipeline, Allocation and Purchase Orders pages read as read-only on View and stay editable on EditPASS100%4%
ui: the Settings catalogs read as read-only on Settings View and stay editable on Settings EditPASS100%2%
ui: an admin assigns Restore versions to a member in Settings → Access, and the member can then restorePASS100%3%
preserve: admins write in every module without grantsPASS100%0%
preserve: View-only members still read grids, lists and module pagesPASS100%0%
preserve: a View-only Sites member still opens a phase lineupPASS100%0%
preserve: the existing site, data and feature gates still refusePASS100%0%
preserve: View on one module does not block Edit on anotherPASS100%0%
preserve: the sites list, and creating, duplicating, editing and deleting a site, as beforePASS100%0%
preserve: a site's layout canvas and its equipment notes and dates as beforePASS100%0%
preserve: creating, editing, deleting and duplicating a phase as beforePASS100%0%
preserve: reading, placing, editing and removing a phase's lineup plan as beforePASS100%0%
preserve: lineups list, create, duplicate, read, edit and delete (library and phase-instance) as beforePASS100%0%
preserve: lineup canvas reads and item and canvas edits (library and phase-instance) as beforePASS100%0%
preserve: allocation demand buckets and done projects as beforePASS100%0%
preserve: allocation runs list, start and commit as beforePASS100%0%
preserve: the equipment grid (POST and PATCH /api/eai/ssrm) reads and edits lots as beforePASS100%0%
preserve: the equipment bulk actions (bulk add, bulk edit, delete, duplicate, redistribute, App Allocation) and the EAI import's refusals answer as beforePASS100%0%
preserve: the Deal Pipeline grid (POST and PATCH /api/dpi/ssrm) reads and edits phases as beforePASS100%0%
preserve: the Purchase Order grid (POST and PATCH /api/mpo/ssrm) reads and edits PO lines as beforePASS100%0%
preserve: module locks (GET and PATCH /api/module-locks) and the writes a lock blocks behave as beforePASS100%0%
preserve: the equipment catalog (GET, POST, PATCH, DELETE /api/catalog) answers as beforePASS100%0%
preserve: item master fields (GET, POST, PATCH, PUT, DELETE /api/item-master-fields) answer as beforePASS100%0%
preserve: pricing assumptions (GET, POST, PATCH, DELETE /api/pricing-assumptions) answer as beforePASS100%0%
preserve: suppliers (GET, POST, PATCH, DELETE /api/suppliers) answer as beforePASS100%0%
preserve: the Access API (/api/access/me, /api/access/principals) answers as beforePASS100%0%
preserve: Version History lets through and keeps out non-operator members as beforePASS100%0%
preserve: every page is served, not found or redirected as beforePASS100%0%
preserve: ui: a View-only Sites member opens a phase's lineup from the Sites pagePASS100%0%