Ahmed Darrazi
|
222a7e0a97
|
feat(104): implement Provider Permission Posture
- T001-T014: Foundation - StoredReport model/migration, Finding resolved
lifecycle, badge mappings (resolved status, permission_posture type),
OperationCatalog + AlertRule constants
- T015-T022: US1 - PermissionPostureFindingGenerator with fingerprint-based
idempotent upsert, severity from feature-impact count, auto-resolve on
grant, auto-reopen on revoke, error findings (FR-015), stale finding
cleanup; GeneratePermissionPostureFindingsJob dispatched from health check;
PostureResult VO + PostureScoreCalculator
- T023-T026: US2+US4 - Stored report payload validation, temporal ordering,
polymorphic reusability, score accuracy acceptance tests
- T027-T029: US3 - EvaluateAlertsJob.permissionMissingEvents() wired into
alert pipeline, AlertRuleResource event type option, cooldown/dedupe tests
- T030-T034: Polish - PruneStoredReportsCommand with config retention,
scheduled daily, end-to-end integration test, Pint clean
UI bug fixes found during testing:
- FindingResource: hide Diff section for non-drift findings
- TenantRequiredPermissions: fix re-run verification link
- tenant-required-permissions.blade.php: preserve details open state
70 tests (50 PermissionPosture + 20 FindingResolved/Badge/Alert), 216 assertions
|
2026-02-21 23:31:03 +01:00 |
|
|
|
d49d33ac27
|
feat(alerts): test message + last test status + deep links (#122)
Implements feature 100 (Alert Targets):
- US1: “Send test message” action (RBAC + confirmation + rate limit + audit + async job)
- US2: Derived “Last test” status badge (Never/Sent/Failed/Pending) on view + edit surfaces
- US3: “View last delivery” deep link + deliveries viewer filters (event_type, destination) incl. tenantless test deliveries
Tests:
- Full suite green (1348 passed, 7 skipped)
- Added focused feature tests for send test, last test resolver/badges, and deep-link filters
Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #122
|
2026-02-18 23:12:38 +00:00 |
|
