security-noteDifficulty: beginnerTime: 15mVersion: v1Reviewed: 2026-07-14Reviewer: Access Control ownerTags: help, admin-security, access-control
Validate Matter Isolation
Verify ethical walls and matter ACL prevent unauthorized cross-matter access.
Overview
Verify ethical walls and matter ACL prevent unauthorized cross-matter access.
Audience
- It Security
- Admin
Product Area
Access Control
Prerequisites
- Matter permissions configured
Steps
- Run access simulation
Use test accounts from separate teams to validate deny paths.
- Review audit events
Confirm access denials are recorded with policy reason codes.
Expected Result
The Access Control workflow completes without unresolved validation errors, and the result is visible to the intended roles.
Security and Audit Notes
- Use the least-privileged role that can complete the task.
- Confirm the resulting change or decision appears in the workspace audit trail when the workflow changes customer data or access.
Limits and Preconditions
- Available controls depend on the tenant plan, enabled modules, jurisdiction, and administrator policy.
- If a named control is not visible, confirm entitlement and role access before treating the behavior as a product failure.
Troubleshooting
- Inherited group bypass: Remove inherited broad groups from sensitive matters.
Related Articles
Escalation
If the documented result cannot be reached after the checks above, capture the workspace identifier, affected product area, timestamp, and a redacted error message, then use Support. Never include secrets, privileged legal content, or customer documents in the initial report.