ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
313-workspace-environment-context-browser-verification
TenantAtlas/apps/platform/app/Models
History
ahmido dd175c16a1 fix: tighten workspace RBAC access boundaries (#364) 
## Summary
- tighten workspace RBAC and panel access boundaries
- remove non-owner workspace membership management capability from workspace role mapping
- add focused boundary coverage for admin panel, managed environments, providers, review packs, operation runs, finding exceptions, and workspace role capabilities
- include spec artifacts for feature 309

## Testing
- cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Auth/WorkspaceFirstManagedEnvironmentAccessTest.php tests/Feature/Rbac/RoleMatrix/ManagerAccessTest.php tests/Feature/Rbac/WorkspaceMembershipsRelationManagerUiEnforcementTest.php tests/Feature/Rbac/AdminPanelAccessBoundaryTest.php tests/Feature/Rbac/FindingExceptionLifecycleAccessBoundaryTest.php tests/Feature/Rbac/ManagedEnvironmentAccessBoundaryTest.php tests/Feature/Rbac/OperationRunAccessBoundaryTest.php tests/Feature/Rbac/ProviderConnectionAccessBoundaryTest.php tests/Feature/Rbac/ReviewPackAccessBoundaryTest.php tests/Feature/Rbac/SystemPanelAccessBoundaryTest.php tests/Feature/Rbac/WorkspaceRoleCapabilityBoundaryTest.php tests/Unit/Auth/CapabilityResolverTest.php tests/Unit/Auth/WorkspaceRoleCapabilityMapTest.php
- cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #364
2026-05-15 14:00:21 +00:00
..
AlertDelivery.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
AlertDestination.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
AlertRule.php feat: implement findings notifications escalation (#261) 2026-04-22 00:54:38 +00:00
AlertRuleDestination.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
AuditLog.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
BackupItem.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
BackupSchedule.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
BackupSet.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
BaselineProfile.php cleanup: retire dead transitional residue (#270) 2026-04-23 16:54:48 +00:00
BaselineSnapshot.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
BaselineSnapshotItem.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
BaselineTenantAssignment.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
EntraGroup.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
EntraRoleDefinition.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
EnvironmentReview.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
EnvironmentReviewSection.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
EvidenceSnapshot.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
EvidenceSnapshotItem.php feat: implement provider-neutral artifact source taxonomy (#343) 2026-05-08 23:47:31 +00:00
Finding.php feat: implement provider-neutral artifact source taxonomy (#343) 2026-05-08 23:47:31 +00:00
FindingException.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
FindingExceptionDecision.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
FindingExceptionEvidenceReference.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
InventoryItem.php feat: implement provider-neutral artifact source taxonomy (#343) 2026-05-08 23:47:31 +00:00
InventoryLink.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ManagedEnvironment.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
ManagedEnvironmentMembership.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ManagedEnvironmentOnboardingSession.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
ManagedEnvironmentPermission.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
ManagedEnvironmentTriageReview.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
OperationalControlActivation.php Remove Findings lifecycle backfill operational surface (controls slice) (#280) 2026-04-26 15:43:47 +00:00
OperationRun.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
PlatformUser.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
Policy.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
PolicyVersion.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ProductUsageEvent.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ProviderConnection.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ProviderCredential.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
RestoreRun.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ReviewPack.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
SettingsCatalogCategory.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
SettingsCatalogDefinition.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
StoredReport.php feat: implement provider-neutral artifact source taxonomy (#343) 2026-05-08 23:47:31 +00:00
SupportAccessGrant.php PR: 276-support-access-governance → platform-dev (#332) 2026-05-05 21:54:26 +00:00
SupportRequest.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantRoleMapping.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantSetting.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
User.php fix: tighten workspace RBAC access boundaries (#364) 2026-05-15 14:00:21 +00:00
UserTenantPreference.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
VerificationCheckAcknowledgement.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Workspace.php feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
WorkspaceMembership.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
WorkspaceSetting.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
WorkspaceSubscription.php 274: Billing subscription truth - add workspace subscription model & tests (#326) 2026-05-04 21:15:57 +00:00