ahmido
90bfe1516e
Implements Spec 090 (Action Surface Contract Compliance & RBAC Hardening). Highlights: - Adds/updates action surface declarations and shrinks baseline exemptions. - Standardizes Filament action grouping/order and empty-state CTAs. - Enforces RBAC UX semantics (non-member -> 404, member w/o capability -> disabled + tooltip, server-side 403). - Adds audit logging for successful side-effect actions. - Fixes Provider Connections list context so header create + row actions resolve tenant correctly. Tests (focused): - vendor/bin/sail artisan test --compact tests/Feature/090/ - vendor/bin/sail artisan test --compact tests/Feature/Guards/ActionSurfaceContractTest.php - vendor/bin/sail bin pint --dirty Livewire/Filament: - Filament v5 + Livewire v4 compliant. - No panel provider registration changes (Laravel 11+ registration remains in bootstrap/providers.php). Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #108
51 lines
1.4 KiB
PHP
51 lines
1.4 KiB
PHP
<?php
|
|
|
|
namespace App\Filament\Resources\Workspaces\Pages;
|
|
|
|
use App\Filament\Resources\Workspaces\WorkspaceResource;
|
|
use App\Models\User;
|
|
use App\Models\WorkspaceMembership;
|
|
use App\Services\Audit\WorkspaceAuditLogger;
|
|
use App\Support\Workspaces\WorkspaceContext;
|
|
use Filament\Resources\Pages\CreateRecord;
|
|
|
|
class CreateWorkspace extends CreateRecord
|
|
{
|
|
protected static string $resource = WorkspaceResource::class;
|
|
|
|
protected function afterCreate(): void
|
|
{
|
|
$user = auth()->user();
|
|
|
|
if (! $user instanceof User) {
|
|
return;
|
|
}
|
|
|
|
WorkspaceMembership::query()->firstOrCreate(
|
|
[
|
|
'workspace_id' => $this->record->getKey(),
|
|
'user_id' => $user->getKey(),
|
|
],
|
|
[
|
|
'role' => 'owner',
|
|
],
|
|
);
|
|
|
|
app(WorkspaceAuditLogger::class)->log(
|
|
workspace: $this->record,
|
|
action: 'workspace.created',
|
|
actor: $user,
|
|
resourceType: 'workspace',
|
|
resourceId: (string) $this->record->getKey(),
|
|
context: [
|
|
'metadata' => [
|
|
'workspace_id' => (int) $this->record->getKey(),
|
|
'slug' => (string) $this->record->slug,
|
|
],
|
|
],
|
|
);
|
|
|
|
app(WorkspaceContext::class)->setCurrentWorkspace($this->record, $user, request());
|
|
}
|
|
}
|