Implements provider access hardening for Intune write operations: - RBAC-based write gate with configurable staleness thresholds - Gate enforced at restore start and in jobs (execute + assignments) - UI affordances: disabled rerun action, tenant RBAC status card, refresh RBAC action - Audit logging for blocked writes - Ops UX label: `rbac.health_check` now displays as “RBAC health check” - Adds/updates Pest tests and SpecKit artifacts for feature 108 Notes: - Filament v5 / Livewire v4 compliant. - Destructive actions require confirmation. - Assets: no new global assets. Tested: - `vendor/bin/sail artisan test --compact` (suite previously green) + focused OpsUx tests for OperationCatalog labels. - `vendor/bin/sail bin pint --dirty`. Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #132
18 lines
403 B
PHP
18 lines
403 B
PHP
<?php
|
|
|
|
namespace App\Exceptions\Hardening;
|
|
|
|
use RuntimeException;
|
|
|
|
class ProviderAccessHardeningRequired extends RuntimeException
|
|
{
|
|
public function __construct(
|
|
public readonly int $tenantId,
|
|
public readonly string $operationType,
|
|
public readonly string $reasonCode,
|
|
public readonly string $reasonMessage,
|
|
) {
|
|
parent::__construct($reasonMessage);
|
|
}
|
|
}
|