Role-Based Views (Dev/Security/Audit)

Module

Web

VERIFIED

Compare view supports role-based viewing with user preference persistence for different personas (Developer, Security, Audit).

Feature directory: src/Web/StellaOps.Web/src/app/core/auth/
Services:
- abac (src/Web/StellaOps.Web/src/app/core/auth/abac.service.ts)
- auth-storage (src/Web/StellaOps.Web/src/app/core/auth/auth-storage.service.ts)
- auth (src/Web/StellaOps.Web/src/app/core/auth/auth.service.ts)
- authority-auth (src/Web/StellaOps.Web/src/app/core/auth/authority-auth.service.ts)
- dpop (src/Web/StellaOps.Web/src/app/core/auth/dpop/dpop.service.ts)
- fresh-auth (src/Web/StellaOps.Web/src/app/core/auth/fresh-auth.service.ts)
- tenant-activation (src/Web/StellaOps.Web/src/app/core/auth/tenant-activation.service.ts)
- tenant-persistence (src/Web/StellaOps.Web/src/app/core/auth/tenant-persistence.service.ts)
Models:
- src/Web/StellaOps.Web/src/app/core/auth/auth-session.model.ts
Source: Feature matrix scan

Setup:
- Log in with a user that has appropriate permissions
- Navigate to the relevant page/section where this feature appears
- Ensure test data exists (scanned artifacts, SBOM data, or seed data as needed)
Core verification:
- Verify the component renders correctly with sample data
- Verify interactive elements respond to user input
- Verify data is fetched and displayed from the correct API endpoints
Edge cases:
- Verify graceful handling when backend API is unavailable (error state)
- Verify responsive layout at different viewport sizes
- Verify accessibility (keyboard navigation, screen reader labels, ARIA attributes)