OptionalCompanyAn existing Company ID for creating Employee rows (Employee.CompanyID is required).
Employee rows the checks created (create-suppression), swept by teardown.
OptionalEnableSet when the seed was present but enabling field security through the entity path failed — a product bug, not a skip.
The FLS target entity name ('MJ: Employees').
OptionalFixtureID of the fixture Employee row Setup seeds (via Pool SQL), for the load/update/round-trip checks.
OptionalMultiSeeded user holding Writer + Denier + Neutral — the cross-role aggregation user.
OptionalReaderSeeded user holding ONLY the FLS Reader role (read-only; Email tightened to Deny, BCMID row deleted).
OptionalReasonWhy the fixture is unusable (seed absent / entity pre-configured), when Usable is false.
OptionalRoleThe four seeded FLS role IDs, resolved by name from live metadata.
True iff seeded users resolved, the entity was FLS-disabled, and Setup enabled it successfully.
OptionalWriterSeeded user holding ONLY the FLS Writer role (read+create+update+delete; fully allowed).
Fixture for the
fls-enforcementbundle: the three seeded Field-Level-Security test users (metadata-optional/integration-test) plus the runtime state the bundle's lifecycle provisions — it enablesEnableFieldLevelSecurityon the target entity through the REAL server entity path (so the snapshot/reconciliation code gets live coverage), and teardown restores the flag and deletes every permission row the snapshot wrote.Usable=false+Reason⇒ the seed is absent or the entity is already FLS-enabled by a real administrator (the bundle refuses to mutate a configured entity) — checks skip-as-pass.EnableErroris different: the seed IS present but enabling through the entity path FAILED. That is a product bug (it has happened — the snapshot/guard collision), so checks FAIL on it rather than skipping.