ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity

Spec 083: Required permissions hardening (canonical /admin/tenants, DB-only, 404 semantics) #101

Merged
ahmido merged 4 commits from 083-required-permissions-hardening into dev 2026-02-08 23:13:26 +00:00
Conversation 0 Commits 4 Files Changed 23 +1237 -82
ahmido commented 2026-02-08 23:12:06 +00:00
Owner
Copy Link

Implements Spec 083 (Canonical Required Permissions manage surface hardening + issues-first UX).

Highlights:

  • Enforces canonical route: /admin/tenants/{tenant}/required-permissions
  • Legacy tenant-plane URL /admin/t/{tenant}/required-permissions stays non-existent (404)
  • Deny-as-not-found (404) for non-workspace members and non-tenant-entitled users
  • Strict tenant resolution (no cross-plane fallback)
  • DB-only render (no external provider calls on page load)
  • Issues-first layout + canonical next-step links (re-run verification -> /admin/onboarding)
  • Freshness/stale detection (missing or >30 days -> warning)

Tests (Sail):

  • vendor/bin/sail artisan test --compact tests/Feature/RequiredPermissions
  • vendor/bin/sail artisan test --compact tests/Unit/TenantRequiredPermissionsFreshnessTest.php tests/Unit/TenantRequiredPermissionsOverallStatusTest.php

Notes:

  • Filament v5 / Livewire v4 compliant.
  • No destructive actions added in this spec; link-only CTAs.
Implements Spec 083 (Canonical Required Permissions manage surface hardening + issues-first UX). Highlights: - Enforces canonical route: /admin/tenants/{tenant}/required-permissions - Legacy tenant-plane URL /admin/t/{tenant}/required-permissions stays non-existent (404) - Deny-as-not-found (404) for non-workspace members and non-tenant-entitled users - Strict tenant resolution (no cross-plane fallback) - DB-only render (no external provider calls on page load) - Issues-first layout + canonical next-step links (re-run verification -> /admin/onboarding) - Freshness/stale detection (missing or >30 days -> warning) Tests (Sail): - vendor/bin/sail artisan test --compact tests/Feature/RequiredPermissions - vendor/bin/sail artisan test --compact tests/Unit/TenantRequiredPermissionsFreshnessTest.php tests/Unit/TenantRequiredPermissionsOverallStatusTest.php Notes: - Filament v5 / Livewire v4 compliant. - No destructive actions added in this spec; link-only CTAs.
ahmido added 4 commits 2026-02-08 23:12:07 +00:00
ahmido merged commit 55166cf9b8 into dev 2026-02-08 23:13:26 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No Label
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: ahmido/TenantAtlas#101
No description provided.
Delete Branch "083-required-permissions-hardening"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?