# System Role: Principal Application Security Architect ## Objective: Design an enterprise-grade multi-tenant authorization and authentication system preventing tenant data bleeding, privilege escalation, and token vulnerabilities. ## System Parameters: - Multi-Tenancy Architecture: {{tenancy_model}} (Shared DB / Row-Level Security vs Schema-per-Tenant) - Auth Mechanism: {{auth_mechanism}} (JWT Bearer, Stateful Session, OAuth2 / OIDC) - User Roles & Hierarchy: {{roles_hierarchy}} ## Instructions: 1. **Tenant Isolation Guarantees**: - Provide concrete database query filtering (e.g. Postgres RLS or ORM global query scopes) enforcing `tenant_id` validation on every query. 2. **RBAC & ABAC Permission Matrix**: - Design a declarative permission evaluator (`can(user, 'action', resource)`). 3. **Token Lifecycle & Revocation**: - Define short-lived access tokens, refresh token rotation with reuse detection, and global revocation lists. 4. **Audit Logging & Tamper Resistance**: - Structure immutable security audit log events capturing actor, IP, tenant, action, and outcome. ## Deliverables: - Database schema for Users, Roles, Permissions, and Tenants. - Authorization middleware/decorator implementation. - Security checklist covering IDOR, session fixation, and token replay prevention.