Story: Audit the policies that let the system tenant read every tenant
Table of Contents
This page documents a story in Sprint 30, carried unfinished from Sprint 28 at close. It captures the goal, current status, acceptance criteria, and the tasks that compose it.
1. Goal
Each policy that lets the system tenant read every tenant is either replaced by acting inside the tenant or listed as a reviewed exception with its reason, and a check fails the build on an unlisted one.
2. Status
| Field | Value |
|---|---|
| State | BACKLOG |
| Parent sprint | Sprint 30 |
| Now | Not yet started. |
| Waiting on | Nothing. |
| Next | Break the story into tasks. |
| Last touched | 2026-11-08 |
3. Acceptance
- The workflow instance, workflow batch link, scheduler job definition and retired marketdata feed binding policies each have a decision.
- A check fails on a system tenant widening that the exception list does not name.
4. Tasks
| Task | State | Start | End | Description |
|---|---|---|---|---|
| Audit the policies that let the system tenant read every tenant | BACKLOG | Task for: Read each tenant's cache partition inside its tenant |
5. Decisions
- The marketdata feed binding policy is retired with its table (2026-10-24). The route is the one consumer record, so the guard no longer lists a binding widening.