ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity

feat: workspace context enforcement + ownership safeguards #86

Merged
ahmido merged 11 commits from feat/072-managed-tenants-workspace-enforcement into dev 2026-02-02 23:00:58 +00:00
Conversation 0 Commits 11 Files Changed 53 +2165 -162
ahmido commented 2026-02-02 17:47:24 +00:00
Owner
Copy Link

Implements workspace-first enforcement and UX:

  • Workspace selected before tenant flows; /admin routes into choose-workspace/choose-tenant
  • Tenant lists and default tenant selection are scoped to current workspace
  • Workspaces UI is tenantless at /admin/workspaces

Security hardening:

  • Workspaces can never have 0 owners (blocks last-owner removal/demotion)
  • Blocked attempts are audited with action_id=workspace_membership.last_owner_blocked + required metadata
  • Optional break-glass recovery page to re-assign workspace owner (audited)

Tests:

  • Added/updated Pest feature tests covering redirects, scoping, tenantless workspaces, last-owner guards, and break-glass recovery.

Notes:

  • Filament v5 strict Page property signatures respected in RepairWorkspaceOwners.
Implements workspace-first enforcement and UX: - Workspace selected before tenant flows; /admin routes into choose-workspace/choose-tenant - Tenant lists and default tenant selection are scoped to current workspace - Workspaces UI is tenantless at /admin/workspaces Security hardening: - Workspaces can never have 0 owners (blocks last-owner removal/demotion) - Blocked attempts are audited with action_id=workspace_membership.last_owner_blocked + required metadata - Optional break-glass recovery page to re-assign workspace owner (audited) Tests: - Added/updated Pest feature tests covering redirects, scoping, tenantless workspaces, last-owner guards, and break-glass recovery. Notes: - Filament v5 strict Page property signatures respected in RepairWorkspaceOwners.
ahmido added 6 commits 2026-02-02 17:47:25 +00:00
ahmido added 1 commit 2026-02-02 18:06:45 +00:00
ahmido added 1 commit 2026-02-02 18:52:53 +00:00
ahmido added 1 commit 2026-02-02 18:56:08 +00:00
ahmido added 1 commit 2026-02-02 18:59:19 +00:00
ahmido added 1 commit 2026-02-02 22:58:18 +00:00 
Route /admin based on tenant count in current workspace; add managed-tenants landing; keep tenant selection workspace-scoped; update tests.
ahmido merged commit 38d9826f5e into dev 2026-02-02 23:00:58 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: ahmido/TenantAtlas#86
No description provided.
Delete Branch "feat/072-managed-tenants-workspace-enforcement"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?