2-Layer Security & Isolation Suite

RBAC & Cross-Tenant Security Audit Matrix

Live automated sandbox testing Layer 1 Organization Isolation (cross-tenant denial), Layer 2 Step-Level Gating (Owner vs Editor vs Viewer), and Hasura Action Security.

Total Verification Tests

8 Tests

Passed Verification

0 Passed

Layer 1 & 2 Security Status

READY TO AUDIT

Security Matrix Test Cases

#1Layer 1: Org Isolation

Org B User queries Org A Workflow by ID

Actor: Bob (Owner Org B) (OWNER)•Expected: DENIED (NULL)

⚪ Not Run

#2Layer 1: Org Isolation

Org B User attempts to trigger Org A Workflow Run

Actor: Bob (Owner Org B) (OWNER)•Expected: DENIED (403)

⚪ Not Run

#3Layer 1: Org Isolation

Org B User attempts to approve Org A Approval Gate

Actor: Bob (Owner Org B) (OWNER)•Expected: DENIED (403)

⚪ Not Run

#4Layer 2: Step Gating

Org A Editor attempts to add DB Write Step

Actor: Edward (Editor Org A) (EDITOR)•Expected: DENIED (403)

⚪ Not Run

#5Layer 2: Step Gating

Org A Editor attempts to add Webhook Trigger

Actor: Edward (Editor Org A) (EDITOR)•Expected: DENIED (403)

⚪ Not Run

#6Role Permissions

Org A Viewer attempts to trigger Workflow Run

Actor: Victor (Viewer Org A) (VIEWER)•Expected: DENIED (403)

⚪ Not Run

#7Role Permissions

Org A Viewer attempts to approve Approval Gate

Actor: Victor (Viewer Org A) (VIEWER)•Expected: DENIED (403)

⚪ Not Run

#8Role Permissions

Org A Owner creates & runs authorized 5-Step Workflow

Actor: Alice (Owner Org A) (OWNER)•Expected: ALLOWED

⚪ Not Run