From 4118452e721a923b3b10ce5e4848171d9eb83db8 Mon Sep 17 00:00:00 2001
From: Joseph Doherty <dohejw01@gmail.com>
Date: Tue, 2 Jun 2026 08:13:38 -0400
Subject: [PATCH] =?UTF-8?q?docs(auth):=20ScadaBridge=20Task=201.7=20review?=
 =?UTF-8?q?=20=E2=80=94=20correct=20stale=20role-name=20prose=20in=20NavMe?=
 =?UTF-8?q?nu=20comments=20(Admin/Design/Deployment/Audit=E2=86=92canonica?=
 =?UTF-8?q?l)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../Components/Layout/NavMenu.razor           | 19 ++++++++++---------
 1 file changed, 10 insertions(+), 9 deletions(-)

diff --git a/src/ZB.MOM.WW.ScadaBridge.CentralUI/Components/Layout/NavMenu.razor b/src/ZB.MOM.WW.ScadaBridge.CentralUI/Components/Layout/NavMenu.razor
index db5f95f6..c4a7f508 100644
--- a/src/ZB.MOM.WW.ScadaBridge.CentralUI/Components/Layout/NavMenu.razor
+++ b/src/ZB.MOM.WW.ScadaBridge.CentralUI/Components/Layout/NavMenu.razor
@@ -17,7 +17,7 @@
 
             <AuthorizeView>
                 <Authorized>
-                    @* Admin section — Admin role only *@
+                    @* Admin section — Administrator role only *@
                     <AuthorizeView Policy="@AuthorizationPolicies.RequireAdmin">
                         <Authorized Context="adminContext">
                             <NavSection Title="Admin"
@@ -32,7 +32,7 @@
                                 <li class="nav-item">
                                     <NavLink class="nav-link" href="/admin/api-keys">API Keys</NavLink>
                                 </li>
-                                @* Import Bundle requires Admin only — Design role is not sufficient.
+                                @* Import Bundle requires Administrator only — Designer role is not sufficient.
                                    Export Bundle lives in the Design section (RequireDesign). *@
                                 <li class="nav-item">
                                     <NavLink class="nav-link" href="/design/transport/import">Import Bundle</NavLink>
@@ -41,7 +41,7 @@
                         </Authorized>
                     </AuthorizeView>
 
-                    @* Design section — Design role *@
+                    @* Design section — Designer role *@
                     <AuthorizeView Policy="@AuthorizationPolicies.RequireDesign">
                         <Authorized Context="designContext">
                             <NavSection Title="Design"
@@ -66,7 +66,7 @@
                         </Authorized>
                     </AuthorizeView>
 
-                    @* Deployment section — Deployment role *@
+                    @* Deployment section — Deployer role *@
                     <AuthorizeView Policy="@AuthorizationPolicies.RequireDeployment">
                         <Authorized Context="deploymentContext">
                             <NavSection Title="Deployment"
@@ -117,9 +117,9 @@
                         </AuthorizeView>
                     </NavSection>
 
-                    @* Site Calls — Site Call Audit (#22). Deployment-role only,
+                    @* Site Calls — Site Call Audit (#22). Deployer-role only,
                        matching the Notification Report page's gate; the whole
-                       section sits inside the policy block so a non-Deployment
+                       section sits inside the policy block so a non-Deployer
                        user does not see the heading. *@
                     <AuthorizeView Policy="@AuthorizationPolicies.RequireDeployment">
                         <Authorized Context="siteCallsContext">
@@ -134,7 +134,7 @@
                     </AuthorizeView>
 
                     @* Monitoring — Health Dashboard is all-roles; Event Logs and
-                       Parked Messages are Deployment-role only (Component-CentralUI).
+                       Parked Messages are Deployer-role only (Component-CentralUI).
                        The section is ungated because Health Dashboard is always
                        a visible child. *@
                     <NavSection Title="Monitoring"
@@ -160,8 +160,9 @@
                        Configuration Audit Log (IAuditService config-change
                        viewer). The whole section sits inside the policy block:
                        a non-audit user does not even see the heading.
-                       OperationalAudit is satisfied by the Admin, Audit, and
-                       AuditReadOnly roles. *@
+                       OperationalAudit is satisfied by the Administrator and
+                       Viewer roles (post-Task-1.7 canonical collapse: former
+                       Audit→Administrator, AuditReadOnly→Viewer). *@
                     <AuthorizeView Policy="@AuthorizationPolicies.OperationalAudit">
                         <Authorized Context="auditContext">
                             <NavSection Title="Audit"