ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
06eba47fbe
TenantAtlas/apps/platform/tests/Feature/Auth
History
ahmido dd175c16a1 fix: tighten workspace RBAC access boundaries (#364) 
## Summary
- tighten workspace RBAC and panel access boundaries
- remove non-owner workspace membership management capability from workspace role mapping
- add focused boundary coverage for admin panel, managed environments, providers, review packs, operation runs, finding exceptions, and workspace role capabilities
- include spec artifacts for feature 309

## Testing
- cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Auth/WorkspaceFirstManagedEnvironmentAccessTest.php tests/Feature/Rbac/RoleMatrix/ManagerAccessTest.php tests/Feature/Rbac/WorkspaceMembershipsRelationManagerUiEnforcementTest.php tests/Feature/Rbac/AdminPanelAccessBoundaryTest.php tests/Feature/Rbac/FindingExceptionLifecycleAccessBoundaryTest.php tests/Feature/Rbac/ManagedEnvironmentAccessBoundaryTest.php tests/Feature/Rbac/OperationRunAccessBoundaryTest.php tests/Feature/Rbac/ProviderConnectionAccessBoundaryTest.php tests/Feature/Rbac/ReviewPackAccessBoundaryTest.php tests/Feature/Rbac/SystemPanelAccessBoundaryTest.php tests/Feature/Rbac/WorkspaceRoleCapabilityBoundaryTest.php tests/Unit/Auth/CapabilityResolverTest.php tests/Unit/Auth/WorkspaceRoleCapabilityMapTest.php
- cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #364
2026-05-15 14:00:21 +00:00
..
AdminLocalSmokeLoginTest.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
AdminLoginIsEntraOnlyTest.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
AdminPanelAuthTest.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
BackupHealthBrowserFixtureLoginTest.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
BreakGlassModeTest.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
BreakGlassWorkspaceOwnerRecoveryTest.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
CrossScopeAccessTest.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
DbOnlyPagesDoNotMakeHttpRequestsTest.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
DisabledUserLoginIsBlockedTest.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
EntraCallbackRateLimiterTest.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
EntraCallbackUpsertByTidOidTest.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
NoAccessPageRendersTest.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
OidcFailureRedirectsSafelyTest.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
PostLoginRoutingByMembershipTest.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
RemoveAcknowledgedCapabilityAliasTest.php feat: remove findings acknowledged compatibility and unify canonical operation types (#296) 2026-04-29 07:34:39 +00:00
SessionSeparationSmokeTest.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
SystemPanelAuthTest.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantChooserSelectionTest.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
WorkspaceFirstManagedEnvironmentAccessTest.php fix: tighten workspace RBAC access boundaries (#364) 2026-05-15 14:00:21 +00:00
WorkspaceLastOwnerGuardTest.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00