TenantAtlas/app/Filament/Resources/TenantResource/Pages
ahmido 38d9826f5e feat: workspace context enforcement + ownership safeguards (#86)
Implements workspace-first enforcement and UX:
- Workspace selected before tenant flows; /admin routes into choose-workspace/choose-tenant
- Tenant lists and default tenant selection are scoped to current workspace
- Workspaces UI is tenantless at /admin/workspaces

Security hardening:
- Workspaces can never have 0 owners (blocks last-owner removal/demotion)
- Blocked attempts are audited with action_id=workspace_membership.last_owner_blocked + required metadata
- Optional break-glass recovery page to re-assign workspace owner (audited)

Tests:
- Added/updated Pest feature tests covering redirects, scoping, tenantless workspaces, last-owner guards, and break-glass recovery.

Notes:
- Filament v5 strict Page property signatures respected in RepairWorkspaceOwners.

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #86
2026-02-02 23:00:56 +00:00
..
CreateTenant.php feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
EditTenant.php 066-rbac-ui-enforcement-helper (#81) 2026-01-30 16:58:02 +00:00
ListTenants.php 065-tenant-rbac-v1 (#79) 2026-01-28 21:09:47 +00:00
ViewTenant.php feat: RBAC troubleshooting & tenant UI bugfix pack (spec 067) (#84) 2026-01-31 20:09:25 +00:00