ahmido
a4f5c4f122
## Summary - standardize Filament table defaults across resources, relation managers, widgets, custom pages, and picker tables - add shared pagination profiles, calm default column visibility, explicit empty states, and session persistence on designated critical resource lists - complete Spec 125 artifacts, regression tests, and dashboard widget follow-up for lazy loading, sortable columns, and toggleable detail columns ## Verification - `docker exec tenantatlas-laravel.test-1 php artisan test --compact --filter=BaselineCompareNow` - `docker exec tenantatlas-laravel.test-1 php artisan test --compact --filter=TableStandardsBaseline` - `docker exec tenantatlas-laravel.test-1 php artisan test --compact --filter=TableDetailVisibility` - `docker exec tenantatlas-laravel.test-1 php artisan test --compact --filter=FilamentTableRiskExceptions` - full suite run completed: `2017 passed, 10 failed, 8 skipped` - manual browser QA completed on the tenant dashboard for lazy loading, sortable widget columns, toggleable hidden status columns, badges, and pagination ## Known Failures The full suite still has 10 pre-existing failures unrelated to this branch: - `Tests\\Unit\\OpsUx\\SummaryCountsNormalizerTest` - `Tests\\Feature\\BackupWithAssignmentsConsistencyTest` (2 tests) - `Tests\\Feature\\BaselineDriftEngine\\CaptureBaselineContentTest` - `Tests\\Feature\\BaselineDriftEngine\\CompareContentEvidenceTest` - `Tests\\Feature\\BaselineDriftEngine\\ResolverTest` - `Tests\\Feature\\Filament\\TenantDashboardDbOnlyTest` - `Tests\\Feature\\Operations\\ReconcileAdapterRunsJobTrackingTest` - `Tests\\Feature\\ReviewPack\\ReviewPackRbacTest` - `Tests\\Feature\\Verification\\VerificationReportRedactionTest` Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #152
228 lines
10 KiB
PHP
228 lines
10 KiB
PHP
<?php
|
|
|
|
namespace App\Filament\Resources\TenantResource\RelationManagers;
|
|
|
|
use App\Models\Tenant;
|
|
use App\Models\TenantMembership;
|
|
use App\Models\User;
|
|
use App\Services\Auth\TenantMembershipManager;
|
|
use App\Support\Auth\Capabilities;
|
|
use App\Support\Rbac\UiEnforcement;
|
|
use Filament\Actions\Action;
|
|
use Filament\Forms;
|
|
use Filament\Notifications\Notification;
|
|
use Filament\Resources\RelationManagers\RelationManager;
|
|
use Filament\Tables;
|
|
use Filament\Tables\Table;
|
|
use Illuminate\Database\Eloquent\Builder;
|
|
|
|
class TenantMembershipsRelationManager extends RelationManager
|
|
{
|
|
protected static string $relationship = 'memberships';
|
|
|
|
public function table(Table $table): Table
|
|
{
|
|
return $table
|
|
->modifyQueryUsing(fn (Builder $query) => $query->with('user'))
|
|
->defaultSort('created_at', 'desc')
|
|
->paginated(\App\Support\Filament\TablePaginationProfiles::relationManager())
|
|
->columns([
|
|
Tables\Columns\TextColumn::make('user.email')
|
|
->label(__('User'))
|
|
->searchable(),
|
|
Tables\Columns\TextColumn::make('user_domain')
|
|
->label(__('Domain'))
|
|
->getStateUsing(function (TenantMembership $record): ?string {
|
|
$email = $record->user?->email;
|
|
|
|
if (! is_string($email) || $email === '' || ! str_contains($email, '@')) {
|
|
return null;
|
|
}
|
|
|
|
return (string) str($email)->after('@')->lower();
|
|
}),
|
|
Tables\Columns\TextColumn::make('user.name')
|
|
->label(__('Name'))
|
|
->toggleable(isToggledHiddenByDefault: true),
|
|
Tables\Columns\TextColumn::make('role')
|
|
->badge()
|
|
->sortable(),
|
|
Tables\Columns\TextColumn::make('source')
|
|
->badge()
|
|
->toggleable(isToggledHiddenByDefault: true),
|
|
Tables\Columns\TextColumn::make('created_at')->since()->sortable(),
|
|
])
|
|
->headerActions([
|
|
UiEnforcement::forTableAction(
|
|
Action::make('add_member')
|
|
->label(__('Add member'))
|
|
->icon('heroicon-o-plus')
|
|
->form([
|
|
Forms\Components\Select::make('user_id')
|
|
->label(__('User'))
|
|
->required()
|
|
->searchable()
|
|
->options(fn () => User::query()
|
|
->orderBy('email')
|
|
->get(['id', 'name', 'email'])
|
|
->mapWithKeys(fn (User $user): array => [
|
|
(string) $user->id => trim((string) ($user->name ? "{$user->name} ({$user->email})" : $user->email)),
|
|
])
|
|
->all()),
|
|
Forms\Components\Select::make('role')
|
|
->label(__('Role'))
|
|
->required()
|
|
->options([
|
|
'owner' => __('Owner'),
|
|
'manager' => __('Manager'),
|
|
'operator' => __('Operator'),
|
|
'readonly' => __('Readonly'),
|
|
]),
|
|
])
|
|
->action(function (array $data, TenantMembershipManager $manager): void {
|
|
$tenant = $this->getOwnerRecord();
|
|
|
|
if (! $tenant instanceof Tenant) {
|
|
abort(404);
|
|
}
|
|
|
|
$actor = auth()->user();
|
|
if (! $actor instanceof User) {
|
|
abort(403);
|
|
}
|
|
|
|
$member = User::query()->find((int) $data['user_id']);
|
|
if (! $member) {
|
|
Notification::make()->title(__('User not found'))->danger()->send();
|
|
|
|
return;
|
|
}
|
|
|
|
try {
|
|
$manager->addMember(
|
|
tenant: $tenant,
|
|
actor: $actor,
|
|
member: $member,
|
|
role: (string) $data['role'],
|
|
source: 'manual',
|
|
);
|
|
} catch (\Throwable $throwable) {
|
|
Notification::make()
|
|
->title(__('Failed to add member'))
|
|
->body($throwable->getMessage())
|
|
->danger()
|
|
->send();
|
|
|
|
return;
|
|
}
|
|
|
|
Notification::make()->title(__('Member added'))->success()->send();
|
|
$this->resetTable();
|
|
}),
|
|
fn () => $this->getOwnerRecord(),
|
|
)
|
|
->requireCapability(Capabilities::TENANT_MEMBERSHIP_MANAGE)
|
|
->tooltip('You do not have permission to manage tenant memberships.')
|
|
->apply(),
|
|
])
|
|
->actions([
|
|
UiEnforcement::forTableAction(
|
|
Action::make('change_role')
|
|
->label(__('Change role'))
|
|
->icon('heroicon-o-pencil')
|
|
->requiresConfirmation()
|
|
->form([
|
|
Forms\Components\Select::make('role')
|
|
->label(__('Role'))
|
|
->required()
|
|
->options([
|
|
'owner' => __('Owner'),
|
|
'manager' => __('Manager'),
|
|
'operator' => __('Operator'),
|
|
'readonly' => __('Readonly'),
|
|
]),
|
|
])
|
|
->action(function (TenantMembership $record, array $data, TenantMembershipManager $manager): void {
|
|
$tenant = $this->getOwnerRecord();
|
|
|
|
if (! $tenant instanceof Tenant) {
|
|
abort(404);
|
|
}
|
|
|
|
$actor = auth()->user();
|
|
if (! $actor instanceof User) {
|
|
abort(403);
|
|
}
|
|
|
|
try {
|
|
$manager->changeRole(
|
|
tenant: $tenant,
|
|
actor: $actor,
|
|
membership: $record,
|
|
newRole: (string) $data['role'],
|
|
);
|
|
} catch (\Throwable $throwable) {
|
|
Notification::make()
|
|
->title(__('Failed to change role'))
|
|
->body($throwable->getMessage())
|
|
->danger()
|
|
->send();
|
|
|
|
return;
|
|
}
|
|
|
|
Notification::make()->title(__('Role updated'))->success()->send();
|
|
$this->resetTable();
|
|
}),
|
|
fn () => $this->getOwnerRecord(),
|
|
)
|
|
->requireCapability(Capabilities::TENANT_MEMBERSHIP_MANAGE)
|
|
->tooltip('You do not have permission to manage tenant memberships.')
|
|
->apply(),
|
|
|
|
UiEnforcement::forTableAction(
|
|
Action::make('remove')
|
|
->label(__('Remove'))
|
|
->color('danger')
|
|
->icon('heroicon-o-x-mark')
|
|
->requiresConfirmation()
|
|
->action(function (TenantMembership $record, TenantMembershipManager $manager): void {
|
|
$tenant = $this->getOwnerRecord();
|
|
|
|
if (! $tenant instanceof Tenant) {
|
|
abort(404);
|
|
}
|
|
|
|
$actor = auth()->user();
|
|
if (! $actor instanceof User) {
|
|
abort(403);
|
|
}
|
|
|
|
try {
|
|
$manager->removeMember($tenant, $actor, $record);
|
|
} catch (\Throwable $throwable) {
|
|
Notification::make()
|
|
->title(__('Failed to remove member'))
|
|
->body($throwable->getMessage())
|
|
->danger()
|
|
->send();
|
|
|
|
return;
|
|
}
|
|
|
|
Notification::make()->title(__('Member removed'))->success()->send();
|
|
$this->resetTable();
|
|
}),
|
|
fn () => $this->getOwnerRecord(),
|
|
)
|
|
->requireCapability(Capabilities::TENANT_MEMBERSHIP_MANAGE)
|
|
->tooltip('You do not have permission to manage tenant memberships.')
|
|
->destructive()
|
|
->apply(),
|
|
])
|
|
->bulkActions([])
|
|
->emptyStateHeading(__('No tenant members'))
|
|
->emptyStateDescription(__('Add a member to delegate access inside this tenant.'));
|
|
}
|
|
}
|