Business Rule
1BR-001
Account lockout after failed attempts
A user with more than five failed login attempts is locked for 30 minutes.
QAplanet
Extract traceable business rules, user stories, acceptance criteria, risks, gaps, actors, systems, and data requirements.
Requirements are ready for structured QA analysis.
| Reference | Type | Title | Confidence |
|---|---|---|---|
| BR-001 | Business Rule | Account lockout after failed attempts | 95% |
| AC-001 | Acceptance Criteria | Valid login redirects to dashboard | 96% |
| RSK-001 | Risk | Impersonation access control | 88% |
| ROLE-001 | Actor / Role | Support Manager | 92% |
| DATA-001 | Data Requirement | CSV order export fields | 94% |
BR-001
Account lockout after failed attempts
A user with more than five failed login attempts is locked for 30 minutes.
No items extracted yet.
AC-001
Valid login redirects to dashboard
Customers can log in with valid credentials and access their account dashboard.
RSK-001
Impersonation access control
Support impersonation can expose sensitive account data if role checks or audit logs are incomplete.
No items extracted yet.
No items extracted yet.
ROLE-001
Support Manager
Only Support Manager users can impersonate a customer for troubleshooting.
No items extracted yet.
DATA-001
CSV order export fields
CSV exports must include order ID, order date, order status, total, and payment status.