Asset Consolidated Limitations
This page consolidates the known limitations of Asset Management across all documentation epics into a single grouped, deduplicated catalog. Each entry names the area, the limitation, a classification, its impact, and the related documentation for depth.
Solution architects and security engineers assessing risk, product owners planning remediation, and QA engineers scoping negative testing.
Reference Content
| Area | Limitation | Classification | Impact | Related doc |
|---|
| Security | Asset endpoints anonymous/tenant-scoped; no backend role authorization | Transitional | Authorization relies on UI gating and network posture | Permissions Matrix |
| Tenant & ownership | Application-only isolation, no DB row-level security | Partial | Isolation depends on correct query filters | Database Summary |
| Tenant & ownership | No per-record ownership authorization; ESS ownership via gateway labor filter | Partial | Ownership enforced only at the gateway for ESS reads | Permissions Matrix |
| Area | Limitation | Classification | Impact | Related doc |
|---|
| UI | Missing detail/assignment/return/document/timeline screens; full-list loading; no frontend tests | Partial | Operators use limited screens; scale concerns | Route Reference |
| API | Compatibility surface transitional | Transitional | Dual surface until cutover | API Summary |
| Area | Limitation | Classification | Impact | Related doc |
|---|
| Persistence | App-level code uniqueness; no serial uniqueness; no one-active-assignment constraint; no concurrency token; no distributed tx | Partial | Race conditions possible under concurrency | Database Summary |
| Messaging | At-least-once, no ordering, unbounded retry, no DLQ/cleanup; broker delivery unverified | Transitional | Consumers must be idempotent and tolerant | Event Summary |
| Area | Limitation | Classification | Impact | Related doc |
|---|
| Integrations | Identifier-only employee reference; no document compensation/orphan reconciliation | Partial | Referential drift possible | Integration Reference |
| Operations | No monitoring/alerting/SLO; dev-only auto-migrate; untested rollback | Transitional | Operational readiness unconfirmed | Implementation Maturity |
| Testing | No frontend tests; smoke-only backend event/UI-path coverage | Partial | Regression risk | Implementation Maturity |
| Governance | Retention/ownership/compat-retirement need confirmation | Requires confirmation | Governance gaps | Reference Overview |
| Compatibility | Transitional numeric identity + gateway cutover | Transitional | Dual identity until cutover completes | Database Summary |
| Events (inbound) | In-service inbound consumer foundational/not implemented | Foundation | No inbound event handling yet | Event Summary |
microservices/src/asset-service/Api/AssetEndpoints.csmicroservices/src/asset-service/Infrastructure/AssetDbContext.csmicroservices/src/gateway-api/Program.cs
asset limitations, known gaps, risk, transitional, classification
- Status: Draft
- Last reviewed: 2026-07-17
- Review cycle: Quarterly