TenantAtlas/app/Filament
ahmido 38d9826f5e feat: workspace context enforcement + ownership safeguards (#86)
Implements workspace-first enforcement and UX:
- Workspace selected before tenant flows; /admin routes into choose-workspace/choose-tenant
- Tenant lists and default tenant selection are scoped to current workspace
- Workspaces UI is tenantless at /admin/workspaces

Security hardening:
- Workspaces can never have 0 owners (blocks last-owner removal/demotion)
- Blocked attempts are audited with action_id=workspace_membership.last_owner_blocked + required metadata
- Optional break-glass recovery page to re-assign workspace owner (audited)

Tests:
- Added/updated Pest feature tests covering redirects, scoping, tenantless workspaces, last-owner guards, and break-glass recovery.

Notes:
- Filament v5 strict Page property signatures respected in RepairWorkspaceOwners.

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #86
2026-02-02 23:00:56 +00:00
..
Clusters/Inventory 058-tenant-ui-polish (#70) 2026-01-22 00:17:23 +00:00
Concerns 065-tenant-rbac-v1 (#79) 2026-01-28 21:09:47 +00:00
Pages feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Resources feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
System/Pages feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Widgets feat: RBAC troubleshooting & tenant UI bugfix pack (spec 067) (#84) 2026-01-31 20:09:25 +00:00