feat(auth)!: ScadaBridge canonical roles + SoD collapse (Audit→Administrator, AuditReadOnly→Viewer) + config-DB migration (Task 1.7)

Standardize role string VALUES on the canonical vocabulary (Administrator/Designer/Deployer/Viewer; Operator/Engineer unused here): Admin -> Administrator Design -> Designer Deployment -> Deployer Audit -> Administrator (COLLAPSE; accepted privilege escalation) AuditReadOnly-> Viewer (COLLAPSE; keeps audit-read, no export) SoD: OperationalAuditRoles = { Administrator, Viewer }, AuditExportRoles = { Administrator } so Viewer reads the audit log + nav but cannot bulk-export, while Administrator does both + holds the full admin surface (the documented, accepted auditor/admin SoD collapse). Atomic move across every enforcement site: - Roles constants; AuthorizationPolicies (RequireClaim values + SoD arrays + honest XML-doc); RoleMapper Deployer check. - ManagementActor.GetRequiredRole switch + the hard-coded site-scope admin-bypass (now Roles.Administrator at all 6 sites). Site-scoping logic is otherwise unchanged. - DebugStreamHub Administrator/Deployer gates (Deployer kept case-sensitive). - CentralUI BrowseService/BindingTester Designer guards; LdapMappingForm dropdown now offers canonical values (incl. Viewer). - Config-DB seed (LdapGroupMappings Id 1-4) + EF migration CanonicalizeRoles: Id-keyed UpdateData for seed rows + idempotent raw catch-all UPDATEs for operator-added rows. Down is lossy on the collapse (documented in-file). No pending model changes. Tests reworked to the collapsed model across Security/CentralUI/ ManagementService/ConfigurationDatabase/Integration suites, incl. explicit Viewer-reads-not-exports and former-Audit-now-Administrator-escalation cases. CHANGELOG: BREAKING security note documenting the canonicalization + SoD collapse.
2026-06-02 08:00:47 -04:00
parent 6ae605160c
commit b104760b3a
52 changed files with 2388 additions and 402 deletions
@@ -61,12 +61,12 @@ public class ManagementActorTests : TestKit, IDisposable
    public void CreateSiteCommand_WithDesignRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new CreateSiteCommand("Site1", "SITE1", "Desc"), "Design");
+        var envelope = Envelope(new CreateSiteCommand("Site1", "SITE1", "Desc"), "Designer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Admin", response.Message);
+        Assert.Contains("Administrator", response.Message);
        Assert.Equal(envelope.CorrelationId, response.CorrelationId);
    }

@@ -79,19 +79,19 @@ public class ManagementActorTests : TestKit, IDisposable
        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Admin", response.Message);
+        Assert.Contains("Administrator", response.Message);
    }

    [Fact]
    public void DeploymentCommand_WithDesignRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new CreateInstanceCommand("Inst1", 1, 1), "Design");
+        var envelope = Envelope(new CreateInstanceCommand("Inst1", 1, 1), "Designer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Deployment", response.Message);
+        Assert.Contains("Deployer", response.Message);
    }

    [Fact]
@@ -109,19 +109,19 @@ public class ManagementActorTests : TestKit, IDisposable
        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Admin", response.Message);
+        Assert.Contains("Administrator", response.Message);
    }

    [Fact]
    public void QueryAuditLogCommand_WithDeploymentRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new QueryAuditLogCommand(null, null, null, null, null, 1, 25), "Deployment");
+        var envelope = Envelope(new QueryAuditLogCommand(null, null, null, null, null, 1, 25), "Deployer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Admin", response.Message);
+        Assert.Contains("Administrator", response.Message);
    }

    // ========================================================================
@@ -154,7 +154,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => siteRepo);

        var actor = CreateActor();
-        var envelope = Envelope(new ListSitesCommand(), "Design");
+        var envelope = Envelope(new ListSitesCommand(), "Designer");

        actor.Tell(envelope);

@@ -220,7 +220,7 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        var envelope = Envelope(
            new CreateInstanceCommand("Pump1", 1, 1),
-            "Deployment");
+            "Deployer");

        actor.Tell(envelope);

@@ -264,7 +264,7 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        var envelope = Envelope(
            new CreateInstanceCommand("BadInst", 99, 1),
-            "Deployment");
+            "Deployer");

        actor.Tell(envelope);

@@ -280,16 +280,16 @@ public class ManagementActorTests : TestKit, IDisposable
    [Fact]
    public void DesignCommand_WithAdminRole_ReturnsUnauthorized()
    {
-        // CreateTemplateCommand requires "Design" role, "Admin" alone is insufficient
+        // CreateTemplateCommand requires "Designer" role, "Administrator" alone is insufficient
        var actor = CreateActor();
        var envelope = Envelope(
            new CreateTemplateCommand("T1", null, null),
-            "Admin");
+            "Administrator");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Design", response.Message);
+        Assert.Contains("Designer", response.Message);
    }

    [Fact]
@@ -305,7 +305,7 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        var envelope = Envelope(
            new CreateSiteCommand("NewSite", "NS1", "Desc"),
-            "Admin");
+            "Administrator");

        actor.Tell(envelope);

@@ -324,10 +324,10 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => siteRepo);

        var actor = CreateActor();
-        // "admin" lowercase should still match "Admin" requirement
+        // "administrator" lowercase should still match "Administrator" requirement
        var envelope = Envelope(
            new CreateSiteCommand("Site2", "S2", null),
-            "admin");
+            "administrator");

        actor.Tell(envelope);

@@ -343,84 +343,84 @@ public class ManagementActorTests : TestKit, IDisposable
    public void SharedScriptCreate_WithAdminRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new CreateSharedScriptCommand("Script1", "code", null, null), "Admin");
+        var envelope = Envelope(new CreateSharedScriptCommand("Script1", "code", null, null), "Administrator");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Design", response.Message);
+        Assert.Contains("Designer", response.Message);
    }

    [Fact]
    public void DatabaseConnectionCreate_WithDeploymentRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new CreateDatabaseConnectionDefCommand("DB1", "Server=test"), "Deployment");
+        var envelope = Envelope(new CreateDatabaseConnectionDefCommand("DB1", "Server=test"), "Deployer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Design", response.Message);
+        Assert.Contains("Designer", response.Message);
    }

    [Fact]
    public void ApiMethodCreate_WithAdminRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new CreateApiMethodCommand("Method1", "code", 30, null, null), "Admin");
+        var envelope = Envelope(new CreateApiMethodCommand("Method1", "code", 30, null, null), "Administrator");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Design", response.Message);
+        Assert.Contains("Designer", response.Message);
    }

    [Fact]
    public void AddTemplateAttribute_WithDeploymentRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new AddTemplateAttributeCommand(1, "Attr1", "Float", null, null, null, false), "Deployment");
+        var envelope = Envelope(new AddTemplateAttributeCommand(1, "Attr1", "Float", null, null, null, false), "Deployer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Design", response.Message);
+        Assert.Contains("Designer", response.Message);
    }

    [Fact]
    public void UpdateApiKey_WithDesignRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new UpdateApiKeyCommand("key-1", true), "Design");
+        var envelope = Envelope(new UpdateApiKeyCommand("key-1", true), "Designer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Admin", response.Message);
+        Assert.Contains("Administrator", response.Message);
    }

    [Fact]
    public void AddScopeRule_WithDesignRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new AddScopeRuleCommand(1, 1), "Design");
+        var envelope = Envelope(new AddScopeRuleCommand(1, 1), "Designer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Admin", response.Message);
+        Assert.Contains("Administrator", response.Message);
    }

    [Fact]
    public void UpdateArea_WithAdminRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new UpdateAreaCommand(1, "NewName"), "Admin");
+        var envelope = Envelope(new UpdateAreaCommand(1, "NewName"), "Administrator");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Design", response.Message);
+        Assert.Contains("Designer", response.Message);
    }

    // ========================================================================
@@ -486,7 +486,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => secRepo);

        var actor = CreateActor();
-        var envelope = Envelope(new ListScopeRulesCommand(1), "Admin");
+        var envelope = Envelope(new ListScopeRulesCommand(1), "Administrator");

        actor.Tell(envelope);

@@ -545,7 +545,7 @@ public class ManagementActorTests : TestKit, IDisposable
            .Returns(new Instance("Pump7") { Id = 7, SiteId = 2 });

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new GetInstanceCommand(7), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new GetInstanceCommand(7), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -560,7 +560,7 @@ public class ManagementActorTests : TestKit, IDisposable
            .Returns(new Instance("Pump7") { Id = 7, SiteId = 1 });

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new GetInstanceCommand(7), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new GetInstanceCommand(7), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -573,7 +573,7 @@ public class ManagementActorTests : TestKit, IDisposable
        AddSiteRepoWithSite(2, "SITE2");

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new GetSiteCommand(2), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new GetSiteCommand(2), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -591,7 +591,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => uiRepo);

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new ListAreasCommand(2), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new ListAreasCommand(2), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -608,7 +608,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => siteRepo);

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new GetDataConnectionCommand(5), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new GetDataConnectionCommand(5), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -623,7 +623,7 @@ public class ManagementActorTests : TestKit, IDisposable
        AddSiteRepoWithSite(2, "SITE2");

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new GetSiteCommand(2), new[] { "1" }, "Admin");
+        var envelope = ScopedEnvelope(new GetSiteCommand(2), new[] { "1" }, "Administrator");

        actor.Tell(envelope);

@@ -637,7 +637,7 @@ public class ManagementActorTests : TestKit, IDisposable
        AddSiteRepoWithSite(2, "SITE2");

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new QueryEventLogsCommand("SITE2"), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new QueryEventLogsCommand("SITE2"), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -651,7 +651,7 @@ public class ManagementActorTests : TestKit, IDisposable
        AddSiteRepoWithSite(2, "SITE2");

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new QueryParkedMessagesCommand("SITE2"), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new QueryParkedMessagesCommand("SITE2"), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -665,7 +665,7 @@ public class ManagementActorTests : TestKit, IDisposable
        AddSiteRepoWithSite(2, "SITE2");

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new RetryParkedMessageCommand("SITE2", "msg-1"), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new RetryParkedMessageCommand("SITE2", "msg-1"), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -679,7 +679,7 @@ public class ManagementActorTests : TestKit, IDisposable
        AddSiteRepoWithSite(2, "SITE2");

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new DiscardParkedMessageCommand("SITE2", "msg-1"), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new DiscardParkedMessageCommand("SITE2", "msg-1"), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -696,7 +696,7 @@ public class ManagementActorTests : TestKit, IDisposable
        AddSiteRepoWithSite(2, "SITE2");

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new DebugSnapshotCommand(9), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new DebugSnapshotCommand(9), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -808,12 +808,12 @@ public class ManagementActorTests : TestKit, IDisposable
    public void QueryDeployments_WithDesignRole_ReturnsUnauthorized()
    {
        var actor = CreateActor();
-        var envelope = Envelope(new QueryDeploymentsCommand(), "Design");
+        var envelope = Envelope(new QueryDeploymentsCommand(), "Designer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Deployment", response.Message);
+        Assert.Contains("Deployer", response.Message);
    }

    [Fact]
@@ -828,7 +828,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => deployRepo);

        var actor = CreateActor();
-        var envelope = Envelope(new QueryDeploymentsCommand(), "Deployment");
+        var envelope = Envelope(new QueryDeploymentsCommand(), "Deployer");

        actor.Tell(envelope);

@@ -846,7 +846,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => deployRepo);

        var actor = CreateActor();
-        var envelope = Envelope(new QueryDeploymentsCommand(InstanceId: 5), "Deployment");
+        var envelope = Envelope(new QueryDeploymentsCommand(InstanceId: 5), "Deployer");

        actor.Tell(envelope);

@@ -864,7 +864,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => deployRepo);

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(InstanceId: 5), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(InstanceId: 5), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -885,7 +885,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => deployRepo);

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(InstanceId: 5), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(InstanceId: 5), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -914,7 +914,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => deployRepo);

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -951,7 +951,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => deployRepo);

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(), new[] { "1" }, "Deployment");
+        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(), new[] { "1" }, "Deployer");

        actor.Tell(envelope);

@@ -974,7 +974,7 @@ public class ManagementActorTests : TestKit, IDisposable
        _services.AddScoped(_ => deployRepo);

        var actor = CreateActor();
-        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(), new[] { "1" }, "Admin", "Deployment");
+        var envelope = ScopedEnvelope(new QueryDeploymentsCommand(), new[] { "1" }, "Administrator", "Deployer");

        actor.Tell(envelope);

@@ -1006,7 +1006,7 @@ public class ManagementActorTests : TestKit, IDisposable
        // "Good" is valid, "Bogus" is not — the whole command must fail with
        // nothing written.
        var overrides = new Dictionary<string, string?> { ["Good"] = "1", ["Bogus"] = "2" };
-        var envelope = Envelope(new SetInstanceOverridesCommand(3, overrides), "Deployment");
+        var envelope = Envelope(new SetInstanceOverridesCommand(3, overrides), "Deployer");

        actor.Tell(envelope);

@@ -1036,7 +1036,7 @@ public class ManagementActorTests : TestKit, IDisposable

        var actor = CreateActor();
        var overrides = new Dictionary<string, string?> { ["A"] = "1", ["B"] = "2" };
-        var envelope = Envelope(new SetInstanceOverridesCommand(4, overrides), "Deployment");
+        var envelope = Envelope(new SetInstanceOverridesCommand(4, overrides), "Deployer");

        actor.Tell(envelope);

@@ -1095,7 +1095,7 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        var envelope = Envelope(
            new UpdateSmtpConfigCommand(1, "new.example.com", 465, "Basic", "new@example.com", "SSL", "user:pass"),
-            "Design");
+            "Designer");

        actor.Tell(envelope);

@@ -1125,7 +1125,7 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        var envelope = Envelope(
            new UpdateSmtpConfigCommand(1, "new.example.com", 465, "Basic", "new@example.com"),
-            "Design");
+            "Designer");

        actor.Tell(envelope);

@@ -1148,7 +1148,7 @@ public class ManagementActorTests : TestKit, IDisposable
            .Returns((Template?)null);

        var actor = CreateActor();
-        var envelope = Envelope(new CreateInstanceCommand("BadInst", 99, 1), "Deployment");
+        var envelope = Envelope(new CreateInstanceCommand("BadInst", 99, 1), "Deployer");

        actor.Tell(envelope);

@@ -1228,12 +1228,12 @@ public class ManagementActorTests : TestKit, IDisposable
        // ExportBundle requires the Design role; an Admin-only caller is rejected.
        AddBundleSubstitutes();
        var actor = CreateActor();
-        var envelope = Envelope(AllExportCommand(), "Admin");
+        var envelope = Envelope(AllExportCommand(), "Administrator");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Design", response.Message);
+        Assert.Contains("Designer", response.Message);
    }

    [Fact]
@@ -1244,12 +1244,12 @@ public class ManagementActorTests : TestKit, IDisposable
        // configuration).
        AddBundleSubstitutes();
        var actor = CreateActor();
-        var envelope = Envelope(new PreviewBundleCommand("AA==", null), "Design");
+        var envelope = Envelope(new PreviewBundleCommand("AA==", null), "Designer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Admin", response.Message);
+        Assert.Contains("Administrator", response.Message);
    }

    [Fact]
@@ -1257,12 +1257,12 @@ public class ManagementActorTests : TestKit, IDisposable
    {
        AddBundleSubstitutes();
        var actor = CreateActor();
-        var envelope = Envelope(new ImportBundleCommand("AA==", null, "skip"), "Design");
+        var envelope = Envelope(new ImportBundleCommand("AA==", null, "skip"), "Designer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Admin", response.Message);
+        Assert.Contains("Administrator", response.Message);
    }

    [Fact]
@@ -1286,7 +1286,7 @@ public class ManagementActorTests : TestKit, IDisposable
            SourceEnvironment: "test-env");

        var actor = CreateActor();
-        var envelope = Envelope(cmd, "Design");
+        var envelope = Envelope(cmd, "Designer");

        actor.Tell(envelope);

@@ -1331,7 +1331,7 @@ public class ManagementActorTests : TestKit, IDisposable
        // base64 check before reaching the importer.
        var payload = Convert.ToBase64String(new byte[] { 0x01, 0x02, 0x03 });
        var actor = CreateActor();
-        var envelope = Envelope(new ImportBundleCommand(payload, null, "skip"), "Admin");
+        var envelope = Envelope(new ImportBundleCommand(payload, null, "skip"), "Administrator");

        actor.Tell(envelope);

@@ -1399,7 +1399,7 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        // "overwrite" policy so the final (Identical) row would otherwise differ
        // from the Modified row's action — proves the last-write-wins semantics.
-        var envelope = Envelope(new ImportBundleCommand(payload, null, "overwrite"), "Admin");
+        var envelope = Envelope(new ImportBundleCommand(payload, null, "overwrite"), "Administrator");

        actor.Tell(envelope);

@@ -1425,7 +1425,7 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        var envelope = Envelope(
            new AddTemplateNativeAlarmSourceCommand(1, "Pressure", "Opc", "ns=2;s=T01", null, "desc", false),
-            "Design");
+            "Designer");

        actor.Tell(envelope);

@@ -1440,12 +1440,12 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        var envelope = Envelope(
            new AddTemplateNativeAlarmSourceCommand(1, "Pressure", "Opc", "ns=2;s=T01", null, null, false),
-            "Deployment");
+            "Deployer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Design", response.Message);
+        Assert.Contains("Designer", response.Message);
    }

    [Fact]
@@ -1473,7 +1473,7 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        var envelope = Envelope(
            new SetInstanceNativeAlarmSourceOverrideCommand(1, "Pressure", "Opc2", "ns=2;s=NEW", null),
-            "Deployment");
+            "Deployer");

        actor.Tell(envelope);

@@ -1488,11 +1488,11 @@ public class ManagementActorTests : TestKit, IDisposable
        var actor = CreateActor();
        var envelope = Envelope(
            new SetInstanceNativeAlarmSourceOverrideCommand(1, "Pressure", "Opc2", "ns=2;s=NEW", null),
-            "Design");
+            "Designer");

        actor.Tell(envelope);

        var response = ExpectMsg<ManagementUnauthorized>(TimeSpan.FromSeconds(5));
-        Assert.Contains("Deployment", response.Message);
+        Assert.Contains("Deployer", response.Message);
    }
 }