Skip to main content

Helpdesk Permissions & Visibility

Verified access matrix

ActorNavigation intentRoute behaviorBackend enforcement
EmployeeSelf Service item requires Helpdesk.ViewSelf in session featuresAuthenticated direct /helpdesk has no specific Helpdesk route ruleNo Helpdesk authorization policy found
Helpdesk agentOperations item recognizes agent role plus one of the configured feature/permission valuesAdmin route rule requires one allowed session valueNo Helpdesk authorization policy found
HR administratorAdministrative audience can see/open Operations Helpdesk when session values allowSame admin route ruleNo Helpdesk authorization policy found
ManagerNot included in Helpdesk admin navigation role listDirect admin route still depends on feature values, not the nav role listNo Helpdesk authorization policy found
Super administratorNot served by tenant portalRedirected to separate portalNo Helpdesk screen found there

Sidebar and route controls read the client-side session feature array. They improve presentation but are not security boundaries. The employee list is not requester-scoped, and the service relies on tenant query filters rather than requester ownership checks.

Requires Confirmation

Effective authentication or authorization enforced upstream, identity-to-feature provisioning, role naming, and production Gateway policies require confirmation. Until independently verified, do not infer access control from hidden navigation.

Source References

  • UI/salary-ui/apps/client-hrms-portal/src/components/AppLayout.tsx
  • UI/salary-ui/apps/client-hrms-portal/src/utils/ProtectedRoute.tsx
  • UI/salary-ui/apps/client-hrms-portal/src/pages/SuperAdminPortalRedirect.tsx
  • microservices/src/helpdesk-service/Program.cs
  • microservices/src/helpdesk-service/Infrastructure/HelpdeskDbContext.cs

See Also

Keywords

Helpdesk, employee service desk, ticket UI, operations, diagnostics.

Revision Information

Draft source-backed documentation reviewed on 2026-07-20; next quarterly review is 2026-10-20.