TenantAtlas/docs/ui/action-surface-contract.md

Action surface contract

This project enforces a small “action surface contract” for Filament Resources / Pages / RelationManagers to keep table UIs consistent, quiet, and safe.

Inspect affordance (required)

Any list-style surface that exposes records must provide an inspect affordance so an admin can open a record.

Accepted implementations:

• Clickable rows (preferred): set recordUrl() for the table.
• View action: a ViewAction in the row actions.
• Primary link column: a column that is clearly the primary affordance to open the record.

Rule: no lone “View” button

Avoid rendering a table that only has a single View row action. This creates visual noise and adds an unnecessary Actions column.

Preferred approach:

• Make the row clickable via recordUrl() and set actions([]) so no Actions column is rendered.

RBAC / safety

• If the current user cannot inspect a record, recordUrl() must return null for that record.
• UI visibility is not authorization; always enforce permissions at the policy / resource level.