slug: dotcms
provider: dotCMS
generated_by: planning/capability-mapping/scripts/classify_capabilities.py
model: claude-opus-5
frame:
- Software & Technology
min_confidence: 0.7
capability_model:
  source: https://github.com/vincentmakes/turbo-ea-capabilities
  license: CC-BY-4.0
  attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities,
    CC BY 4.0
  notice: NOTICE
edge_count: 5
edges:
- tag: Experiment
  spec_file: dotcms-experiment-api-openapi.yml
  capability_id: BC-4280.50
  capability_id_l1: BC-4280
  capability_name: A/B Test Execution
  confidence: 0.92
  evidence: POST /api/v1/experiments/{experimentId}/variants addVariant; DELETE /api/v1/experiments/{experimentId}/goals/primary;
    DELETE .../targetingConditions/{id}; schemas ExperimentResults, BayesianResult, CredibilityInterval,
    Metric
  reason: Operations create and run experiments with variants, primary goals, targeting conditions, scheduling
    and statistical results (Bayesian credibility intervals) — configuration, targeting and monitoring
    of running A/B tests on the product's content.
- tag: Roles
  spec_file: dotcms-roles-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.85
  evidence: '"User role and permission management"; "POST /api/v1/roles/{roleid}/users/{userId} addUserToRole
    Grant a role to a user"; "checkUserRoles"'
  reason: Operations create roles, grant roles to users and check user role membership — role-based access
    control administration, i.e. Identity & Access Management. Not a business-domain capability beyond
    IAM.
- tag: Permissions
  spec_file: dotcms-permissions-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.8
  evidence: '"Permission management and access control"; PUT /api/v1/permissions/user/{userId}/asset/{assetId}
    updateUserPermissions; GET /api/v1/permissions/role/{roleId} getRolePermissions'
  reason: Operations read and write user/role permissions on assets — role-based access control administration,
    which is identity and access management.
- tag: SAML Authentication
  spec_file: dotcms-saml-authentication-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.8
  evidence: '"SAML SSO authentication and integration"; "Initiate SAML login", "Get SAML metadata" at
    /api/v1/dotsaml/metadata/{idpConfigId}'
  reason: SAML single sign-on login/logout and IdP metadata exchange is identity federation for application
    users — Identity & Access Management. Could arguably be tenant identity federation, but this is a
    single-instance CMS login flow rather than multi-tenant SaaS federation.
- tag: Users
  spec_file: dotcms-users-api-openapi.yml
  capability_id: BC-620.20
  capability_id_l1: BC-620
  capability_name: Identity & Access Management
  confidence: 0.78
  evidence: '"User account management and administration"; createUser, deactivateUser "Deactivate an existing
    user", loginAsUser, schema Role'
  reason: Operations create, activate, deactivate and delete user accounts and handle impersonation and
    roles — account/identity administration, i.e. Identity & Access Management, not HR employee records.