Loading
Topic
Authorization, audit logs, data retention, tenant isolation, sensitive workflows, and backend trust boundaries.
Practice items tagged with Security and Audit Design.
Explains admin list/edit/delete workflows with capability checks, audit events, confirmation, validation, and recovery.
Explains permission-aware navigation, guarded routes, server authorization, stale capabilities, and safe 401/403 handling.
Designs explicit workflow states, allowed transitions, guard rules, audit history, idempotency, and operational repair paths.
Designs feature flag storage, targeting, safe defaults, auditability, and rollout observability for backend behavior.
Designs tenant isolation across API, data, cache, background jobs, search, and admin access.
Designs immutable audit records for sensitive administrative changes with useful before/after context and safe retention.