TenantAtlas/app
ahmido 38d9826f5e feat: workspace context enforcement + ownership safeguards (#86)
Implements workspace-first enforcement and UX:
- Workspace selected before tenant flows; /admin routes into choose-workspace/choose-tenant
- Tenant lists and default tenant selection are scoped to current workspace
- Workspaces UI is tenantless at /admin/workspaces

Security hardening:
- Workspaces can never have 0 owners (blocks last-owner removal/demotion)
- Blocked attempts are audited with action_id=workspace_membership.last_owner_blocked + required metadata
- Optional break-glass recovery page to re-assign workspace owner (audited)

Tests:
- Added/updated Pest feature tests covering redirects, scoping, tenantless workspaces, last-owner guards, and break-glass recovery.

Notes:
- Filament v5 strict Page property signatures respected in RepairWorkspaceOwners.

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #86
2026-02-02 23:00:56 +00:00
..
Console/Commands feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Exceptions feat/032-backup-scheduling-mvp (#34) 2026-01-05 04:22:13 +00:00
Filament feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Http feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Jobs 065-tenant-rbac-v1 (#79) 2026-01-28 21:09:47 +00:00
Listeners 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
Livewire feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Models feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Notifications 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
Observers 054-unify-runs-suitewide (#63) 2026-01-17 22:25:00 +00:00
Policies feat: workspace context enforcement (specs 070–072) (#85) 2026-02-02 10:07:41 +00:00
Providers feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Rules feat/049-backup-restore-job-orchestration (#56) 2026-01-11 15:59:06 +00:00
Services feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Support feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00