Authorization boundary
No self-approval; system administration does not automatically grant record access.
MOBILE-ID · TRUSTED LTANS
Service portals
Five role-based portals with explicit permissions and a designed service-login journey.
Five role-specific portals
The panels below illustrate tasks using synthetic data, not running backend screens. No login URLs are provisioned; contact Mobile-ID to confirm environment and access.
Administration
Organizations, permissions, policies and approvals.
View tasks and permissions →
Operations
Jobs, alerts, renewals and recovery.
View tasks and permissions →
Member
Deposit, track, search and export records.
View tasks and permissions →
Developer
Configure applications, credentials and events.
View tasks and permissions →
Verifier
Inspect evidence packages and explain outcomes.
View tasks and permissions →Administration
Organizations, permissions, policies and approvals.
Organization and policy governance
| Item | Target task | Control |
|---|---|---|
| org-test-001 | Map roles | Separate duties |
| policy-test-v1 | Review profile | No self-approval |
| hold-case-test | Approve scope | Retain history |
Operations
Jobs, alerts, renewals and recovery.
Observe and recover jobs
Job | Situation | Action |
|---|---|---|
| job-test-001 | TSA pending | Reconcile dependency |
| job-test-002 | Storage access lost | Restore access |
| event-test-001 | Duplicate delivery | Deduplicate inbox |
Authorization boundary
Authorized deduplicated replay; operations cannot bypass a hold.
Member
Deposit, track, search and export records.
Organization records
| Record | Task | Scope |
|---|---|---|
| record-test-001 | Deposit record | Assigned tenant |
| record-test-002 | Read history | Exact revision |
| package-test-001 | Request export | Separate permission |
Authorization boundary
Tenant and record-group permissions; content export requires a separate right.
Developer
Configure applications, credentials and events.
Applications and integration
| Configuration | Task | Boundary |
|---|---|---|
| app-test-001 | Review scopes | Least privilege |
| webhook-test-001 | Inspect delivery | No key disclosure |
| API 3.0.0-draft | Compare contract | Not backend execution |
Authorization boundary
No frontend secrets; isolate test and production applications.
Verifier
Inspect evidence packages and explain outcomes.
Context-bound verification workbench
| Input | Check | Interpretation |
|---|---|---|
| synthetic record | Digest binding | Exact bytes |
| evidence revision | Evidence history | Exact revision |
| trust context | Certificates/status | Sufficient grounds? |
Authorization boundary
Use an authorized trust context; verification rights do not automatically grant content access.
GoPaperless SSO and LTANS authorization
Authenticate
Sign in with the configured identity provider and validate the session server-side.
Choose tenant
Choose only assigned tenants; check portal and object permissions separately.
Perform task
Separate identity from view, export, approval and disposition permissions.
End session
Expiry/permission changes require reevaluation; logout follows actual federation.
Access matrix and task handoff
| Role | Task | Boundary / handoff |
|---|---|---|
| Admin | Grant roles, approve scoped policy/holds. | No inherent content access or self-approval. |
| Operator | Reconcile Jobs, TSA, storage and event replay. | Escalate policy/hold decisions; no bypass. |
| Member | Submit, track and request exports. | Read/export scope follows tenant and record grants. |
| Developer | Configure client grants/webhooks and test contracts. | No access to secrets/content outside grants. |
| Verifier | Inspect packages and contextual reports. | Verification does not grant all content; acknowledgement needs separate authority. |