ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
1f3619bd16
TenantAtlas/app/Filament/Resources
History
ahmido 1f3619bd16 feat: tenant-owned query canon and wrong-tenant guards (#180) 
## Summary
- introduce a shared tenant-owned query and record-resolution canon for first-slice Filament resources
- harden direct views, row actions, bulk actions, relation managers, and workspace-admin canonical viewers against wrong-tenant access
- add registry-backed rollout metadata, search posture handling, architectural guards, and focused Pest coverage for scope parity and 404/403 semantics

## Included
- Spec 150 package under `specs/150-tenant-owned-query-canon-and-wrong-tenant-guards/`
- shared support classes: `TenantOwnedModelFamilies`, `TenantOwnedQueryScope`, `TenantOwnedRecordResolver`
- shared Filament concern: `InteractsWithTenantOwnedRecords`
- resource/page/policy hardening across findings, policies, policy versions, backup schedules, backup sets, restore runs, inventory items, and Entra groups
- additional regression coverage for canonical tenant state, wrong-tenant record resolution, relation-manager congruence, and action-surface guardrails

## Validation
- `vendor/bin/sail artisan test --compact` passed
- full suite result: `2733 passed, 8 skipped`
- formatting applied with `vendor/bin/sail bin pint --dirty --format agent`

## Notes
- Livewire v4.0+ compliant via existing Filament v5 stack
- provider registration remains in `bootstrap/providers.php`
- globally searchable first-slice posture: Entra groups scoped; policies and policy versions explicitly disabled
- destructive actions continue to use confirmation and policy authorization
- no new Filament assets added; existing deployment flow remains unchanged, including `php artisan filament:assets` when registered assets are used

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #180
2026-03-18 08:33:13 +00:00
..
AlertDeliveryResource/Pages feat: canonical tenant context resolution (#164) 2026-03-11 21:24:28 +00:00
AlertDestinationResource/Pages Spec 103: IA semantics (scope vs filter vs targeting) + UI polish (#126) 2026-02-21 00:28:15 +00:00
AlertRuleResource/Pages Spec 103: IA semantics (scope vs filter vs targeting) + UI polish (#126) 2026-02-21 00:28:15 +00:00
BackupScheduleResource feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
BackupSetResource feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
BaselineProfileResource feat: add cross-resource navigation cohesion (#160) 2026-03-10 16:08:14 +00:00
BaselineSnapshotResource/Pages feat: standardize enterprise detail pages (#162) 2026-03-10 23:06:26 +00:00
EntraGroupResource/Pages feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
FindingResource/Pages feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
InventoryItemResource/Pages feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
PolicyResource feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
PolicyVersionResource/Pages feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
ProviderConnectionResource/Pages feat: standardize platform provider identity (#166) 2026-03-13 16:29:08 +00:00
RestoreRunResource/Pages feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
ReviewPackResource/Pages Fix Review Pack generation UX + notifications (#133) 2026-02-23 19:42:52 +00:00
TenantResource feat: central tenant operability policy (#177) 2026-03-17 11:48:55 +00:00
Workspaces Spec 125: standardize Filament table UX (#152) 2026-03-08 22:54:56 +00:00
AlertDeliveryResource.php feat: add cross-resource navigation cohesion (#160) 2026-03-10 16:08:14 +00:00
AlertDestinationResource.php Spec 125: standardize Filament table UX (#152) 2026-03-08 22:54:56 +00:00
AlertRuleResource.php Spec 125: standardize Filament table UX (#152) 2026-03-08 22:54:56 +00:00
BackupScheduleResource.php feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
BackupSetResource.php feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
BaselineProfileResource.php feat: add Intune RBAC baseline compare support (#156) 2026-03-09 18:49:20 +00:00
BaselineSnapshotResource.php feat: standardize enterprise detail pages (#162) 2026-03-10 23:06:26 +00:00
EntraGroupResource.php feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
FindingResource.php feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
InventoryItemResource.php feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
OperationRunResource.php feat: harden queued execution legitimacy (#179) 2026-03-17 21:52:40 +00:00
PolicyResource.php feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
PolicyVersionResource.php feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
ProviderConnectionResource.php feat: implement tenant action taxonomy lifecycle visibility (#174) 2026-03-16 00:57:17 +00:00
RestoreRunResource.php feat: tenant-owned query canon and wrong-tenant guards (#180) 2026-03-18 08:33:13 +00:00
ReviewPackResource.php Spec 125: standardize Filament table UX (#152) 2026-03-08 22:54:56 +00:00
TenantResource.php feat: central tenant operability policy (#177) 2026-03-17 11:48:55 +00:00