← Back to README

Background Jobs Monitor is authenticated backoffice-only and read-only by default.

Every Management API endpoint is decorated with the Settings section policy (AuthorizationPolicies.SectionAccessSettings) at the controller level, so authorization applies to every action — an endpoint is denied by default rather than left open.

Grant the Settings section to a user group under Users → User groups → group → Sections.

The only state change the package makes is the manual Run now trigger. All other endpoints only read discovery data and telemetry. See Manual Trigger.

• Legacy timing values are read from non-public fields (_period / _delay) — reading only.
• Modern jobs are unwrapped from their hosted-service wrapper to read timing and to invoke RunJobAsync only in response to an authorized Run now request.
• Reflection is never driven by user input, and no job type is instantiated from a client-supplied string — the job to run is resolved from the server-discovered set by key.

The package handles no secrets and makes no outbound network calls; all data is local to the site.

Manual runs record the initiating backoffice user id. With durable storage enabled, this is persisted for later review.