Recruitment Permissions and Governance Reference
| Capability | Authentication / tenant | UI visibility | Native API | Compatibility API | Scope evidence | Public/document behavior | Maturity / confirmation |
|---|---|---|---|---|---|---|---|
| Protected workspace/read | Client authentication and tenant context | Recruitment feature and recruiter/HR-oriented hints | No explicit endpoint policy | No explicit endpoint policy | Ownership/manager scope absent | Documents may be exposed through workspace actions | Transitional; authoritative enforcement required |
| Manage openings/candidates/interviews/offers/onboarding | Protected UI; backend tenant required where command uses context | Same coarse feature guard | No per-capability policy | No per-capability policy | Recruiter/HR/hiring-manager/interviewer scopes unconfirmed | Compensation, notes, KYC, and documents need finer controls | Requires confirmation |
| Requisition decision | Tenant context; Workflow mode may restrict direct decision | No dedicated UI | No explicit policy | No dedicated compatibility decision UI | Approver identity and separation of duties incomplete | Not public | Transitional |
| Compensation approval / offer approval | Protected UI for candidate CTC; native offer APIs exist | No separate action permission | No explicit policy | No separate enforcement evidence | Thresholds and self-approval restrictions absent | Compensation boundary requires governance | Requires confirmation |
| Public application | Public route/endpoints | Public Careers | Public native/compatibility surface | Public compatibility surface | Candidate scope by submitted opening | Resume upload; consent/retention unconfirmed | Transitional |
| Public feedback/offer response | Opaque route token | Public token route | Public endpoints exist | Public compatibility endpoints | Interviewer/candidate binding unconfirmed | Token and sensitive content risk | Requires confirmation |
| Documents | Protected/public depending action | Embedded actions only | No explicit document permission | Coarse Recruitment route | Per-document ownership absent | Download and content access need governance | Requires confirmation |
| Workflow callback | Service callback route | No UI | No explicit callback policy | N/A | Caller trust unconfirmed | Not public UI | Requires confirmation |
The backend policy catalog is empty. UI roles/features influence visibility but do not prove authoritative authorization. Platform entitlement enforcement, final role catalog, segregation of duties, and audit-access policy require confirmation.
Source References
microservices/src/recruitment-service/Api/Policies.csmicroservices/src/recruitment-service/Api/RecruitmentEndpoints.csmicroservices/src/recruitment-service/Api/RecruitmentCompatEndpoints.csmicroservices/src/recruitment-service/Api/RecruitmentPublicEndpoints.csUI/salary-ui/apps/client-hrms-portal/src/utils/ProtectedRoute.tsxUI/salary-ui/apps/client-hrms-portal/src/components/AppLayout.tsx
Summary
This Draft page summarizes source-backed Recruitment behavior and explicitly marks incomplete governance or implementation.
Audience
Recruitment stakeholders, product, engineering, QA, support, operations, architecture, security, and implementation partners as applicable to this page.
Overview
Use the source-backed sections above as the authoritative scope. Unsupported behavior remains Requires confirmation or Not implemented.
Related Articles
See Also
Keywords
- Recruitment
- Hiring lifecycle
- Draft documentation
Revision Information
- Status: Draft
- Last reviewed: 2026-07-16
- Review cycle: Quarterly