noCV
CLINK-104 · Handle identity changes

Recheck mobile work-item access after account switching

Practice briefBugAdvanced

Switching accounts leaves the previous account's work screen visible. Clear account-scoped cache before refetching.

Focused work estimate
3h + prerequisites
Priority in the scenario
High
Engineering practice
Authorization · Caching

Estimated field mix

  • Security70%
  • Mobile30%

Field percentages are editorial estimates of the ticket's engineering focus. They total 100%; they are not measured time, proficiency scores, or ownership evidence.

Your next step

Review it, then add it to your workspace.

The board opens an editable draft; nothing is saved until you confirm it. Sign-in and workspace permissions apply, and Demo boards remain ephemeral.

Project context

Fictional team-planning app Finch opens invitations and shared work items. All users and sessions are synthetic; implement the app in an emulator without external identity credentials.

Setup prerequisites

  • Create a local session adapter with expiry and revocation.
  • Define synthetic invitation and work-item links.

Preceding work

Complete these dependencies, or supply their agreed outputs before taking this ticket.

Acceptance criteria

  • Old content clears on switch
  • New identity requires authorized read
  • Denied reads show no prior item data

Implementation constraints

  • Account identity belongs in cache boundaries.

Verification to include

  • Switch to authorized account
  • Switch to denied account

Deliverables

  • Account-switch isolation and checks

Rollout and recovery

Force full local session reset while repaired.

Value of the work

For the engineer: Practice navigation state, capability checks and session boundaries.

For the team: Inspect whether links remain useful without bypassing authorization.

Evidence boundaries

Outcome Evidence: Tests, patches, and runbooks are requested deliverables. They become Outcome Evidence only through a qualified Mission and immutable Evidence IDs.

Ownership Evidence: Independent adaptation must be observed under a declared verification policy and cite immutable Evidence IDs. Completing a planning ticket establishes no Ownership Evidence.