Access Control

User authentication, session management, and role-based authorisation for secure system access.

Overview

The access control domain encompasses both authentication (proving user identity) and authorisation (granting role-based permissions) for the Digital Lock On system. This includes login flows, session management, logout procedures, route protection, and role-based access controls.

Scope

Authentication

• User identity verification
• Session management and lifecycle
• Login and logout flows
• Route protection

Authorisation

• Role-based access control (RBAC)
• Resource permissions
• Action-level security
• Role hierarchy enforcement

Requirements

Authentication Requirements

• REQ-AUTH-001: User Authentication
• REQ-AUTH-002: Route Protection

Authorisation Requirements

To be documented as part of current requirements cleanup efforts:

• [ ] REQ-AUTHZ-001: Role-Based Access Control
• [ ] REQ-AUTHZ-002: Resource Permissions

Related Domains

• System Administration - User creation, role assignment, and lifecycle management
• Protection Management - Role-based access to protection features
• Worker Operations - Worker-specific permissions and access controls
• Plant Operations - Plant operator permissions and access controls

Integration Points

• System Administration: User roles are created and assigned in system administration, then enforced in access control
• All Operational Domains: Access control provides the security foundation for all operational features
• Route Protection: Frontend routes are protected based on user roles and authentication status