Verification Matrix — PWA Activate (Multi-site)

Implements: PWA Activate Multi Site

Scenarios (at a glance)

ID	Title	ACs Covered	Type
TC-PROT-MS-001 (3.1.2.2)	Activate prompts confirmation with conditions	AC-PROT-002-01	Positive
TC-PROT-MS-002 (3.1.2.2)	Confirm sets PWA Active; Worksites remain Inactive	AC-PROT-002-02	Positive
TC-PROT-MS-003 (3.1.2.2)	Success message shown	AC-PROT-002-03	Positive
TC-PROT-MS-004 (3.1.2.2)	Audit payload contains actor + timestamp	AC-PROT-002-04	Positive
TC-PROT-MS-005 (3.1.2.2)	RPO sees Activate action	AC-PROT-002-05	Positive
TC-PROT-MS-006 (3.1.2.2)	PWA Active shows RPO details	AC-PROT-002-06	Positive
TC-PROT-MS-007	Inactive Worksite blocks worker lock‑on	AC-PROT-002-07	Defensive
TC-PROT-MS-008 (3.1.2.2)	No auto authorise/enable on activation	AC-PROT-002-02, AC-PROT-002-08	Defensive
TC-PROT-MS-009	Requires Authorise then Enable	AC-PROT-002-08	Positive
TC-PROT-MS-010	Already Active prevents activation	AC-PROT-002-09	Defensive
TC-PROT-MS-011 (3.1.1.1)	Non‑RPO cannot access activation	AC-PROT-002-10	Negative

Scenario details

TC-PROT-MS-001: Activate prompts confirmation with conditions

Covers: AC-PROT-002-01

• Arrange
  • The user is logged in with the RPO role.
  • The PWA's status is Inactive.
  • The PWA is configured with two or more Worksites.
• Act
  • The user initiates the Activate PWA action.
• Assert
  • The system displays a confirmation dialog.
  • The confirm button is disabled.
• Act
  • The user checks the confirmation checkboxes.
• Assert
  • The confirm button is enabled.
• Act
  • The user clicks the cancel button.
• Assert
  • The confirmation dialog is closed.

TC-PROT-MS-002: Confirm sets PWA Active; Worksites remain Inactive

Covers: AC-PROT-002-02

• Arrange
  • The user is logged in with the RPO role.
  • The PWA's status is Inactive with two or more Worksites.
• Act
  • The user confirms the activation.
• Assert
  • The PWA's status changes to Active.
  • Each Worksite's status remains Inactive.

TC-PROT-MS-003: Success message shown

Covers: AC-PROT-002-03

• Arrange
  • The user is logged in with the RPO role.
  • The PWA's status is Inactive with two or more Worksites.
• Act
  • The user confirms the activation.
• Assert
  • The system displays a success toast/banner.

TC-PROT-MS-004: Audit payload contains actor + timestamp

Covers: AC-PROT-002-04

• Arrange
  • The user is logged in with the RPO role.
  • The PWA's status is Inactive with two or more Worksites.
• Act
  • The user activates and confirms activation.
• Assert
  • An audit event is recorded with the activating user's identifier and a timestamp.

TC-PROT-MS-005: RPO sees Activate action

Covers: AC-PROT-002-05

• Arrange
  • The user is logged in with the RPO role.
• Act
  • The user views available PWA actions.
• Assert
  • The Activate PWA action is visible.

TC-PROT-MS-006: PWA Active shows RPO details

Covers: AC-PROT-002-06

• Arrange
  • The PWA has been activated.
• Act
  • The user views the PWA header/details.
• Assert
  • The activating RPO's name and phone number are visible.

TC-PROT-MS-007: Inactive Worksite blocks worker lock‑on

Covers: AC-PROT-002-07

• Arrange
  • The PWA is Active; the Worksite is Inactive.
• Act
  • A worker attempts to lock on to the Worksite.
• Assert
  • The lock‑on action is unavailable.

TC-PROT-MS-008: No auto authorise/enable on activation

Covers: AC-PROT-002-02, AC-PROT-002-08

• Arrange
  • The PWA has been activated.
• Act
  • The user views the list of Worksites.
• Assert
  • All Worksites remain Inactive.
  • The Authorise/Enable actions are still required to progress each Worksite.

TC-PROT-MS-009: Requires Authorise then Enable

Covers: AC-PROT-002-08

• Arrange
  • The Worksite's status is Inactive.
• Act
  • The RPO authorises the Worksite, then the SP enables it.
• Assert
  • The Worksite transitions Inactive → Authorised → Enabled.

TC-PROT-MS-010: Already Active prevents activation

Covers: AC-PROT-002-09

• Arrange
  • The PWA's status is Active.
• Act
  • The user attempts to initiate Activate PWA.
• Assert
  • The system prevents activation (control disabled or error displayed).

TC-PROT-MS-011: Non‑RPO cannot access activation

Covers: AC-PROT-002-10

• Arrange
  • The user is authenticated without the RPO role.
  • The PWA's status is Inactive.
• Act
  • The user views available PWA actions.
• Assert
  • The Activate PWA action is hidden or disabled.