Security infrastructure looks clean in architecture diagrams. Production is messier. Stale data, delayed events, service failures, and emergency exceptions all affect real access decisions.
This is Part 1 of Security Infrastructure in Practice, a series about what happens when security design meets production systems.
The policy looked correct.
Employees in the support function could view customer cases. Contractors could view only the cases assigned to them. Unmanaged devices were blocked from downloading attachments.
Then an employee received the contractor experience.
