How to Verify Tenant Cannot See Internal Data
-
Sign in as a tenant.
-
Open the Lease section from the tenant dashboard.
-
Verify that lease terms (property address, term dates, monthly rent, deposit, status) are visible, but internal PM notes and landlord-only fields are not displayed.
-
Navigate to the Maintenance section. [SCREENSHOT NEEDED HERE]
-
Verify that maintenance request details are visible but internal PM notes are hidden. [SCREENSHOT NEEDED HERE]
What to expect
The tenant sees lease terms and maintenance request details relevant to them. Internal PM notes and landlord-only fields are hidden from the tenant’s view in both the lease and maintenance sections.
Need help?
| Symptom | Cause | Fix |
|---|---|---|
| Internal PM notes visible to tenant | Serializer not filtering field-level data by role | Verify backend serializer excludes internal fields for tenant role |
| Maintenance internal notes visible | Tenant role permission bypassed | Verify IsTenant permission class restricts access to tenant-specific fields |