TenantAtlas/app/Models
ahmido 38d9826f5e feat: workspace context enforcement + ownership safeguards (#86)
Implements workspace-first enforcement and UX:
- Workspace selected before tenant flows; /admin routes into choose-workspace/choose-tenant
- Tenant lists and default tenant selection are scoped to current workspace
- Workspaces UI is tenantless at /admin/workspaces

Security hardening:
- Workspaces can never have 0 owners (blocks last-owner removal/demotion)
- Blocked attempts are audited with action_id=workspace_membership.last_owner_blocked + required metadata
- Optional break-glass recovery page to re-assign workspace owner (audited)

Tests:
- Added/updated Pest feature tests covering redirects, scoping, tenantless workspaces, last-owner guards, and break-glass recovery.

Notes:
- Filament v5 strict Page property signatures respected in RepairWorkspaceOwners.

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #86
2026-02-02 23:00:56 +00:00
..
AuditLog.php feat: TenantPilot v1 - Complete implementation (Phases 1-12) 2025-12-12 02:27:54 +01:00
BackupItem.php feat(006): foundations + assignment mapping and preview-only restore guard (#7) 2025-12-26 23:44:31 +00:00
BackupSchedule.php feat/032-backup-scheduling-mvp (#34) 2026-01-05 04:22:13 +00:00
BackupScheduleRun.php feat/032-backup-scheduling-mvp (#36) 2026-01-07 01:12:12 +00:00
BackupSet.php feat: TenantPilot v1 - Complete implementation (Phases 1-12) 2025-12-12 02:27:54 +01:00
EntraGroup.php 051-entra-group-directory-cache (#57) 2026-01-11 23:24:12 +00:00
EntraGroupSyncRun.php 051-entra-group-directory-cache (#57) 2026-01-11 23:24:12 +00:00
Finding.php feat/044-drift-mvp (#58) 2026-01-14 23:16:10 +00:00
InventoryItem.php feat/040-inventory-core (#43) 2026-01-07 14:54:24 +00:00
InventoryLink.php feat/042-inventory-dependencies-graph (#49) 2026-01-10 00:20:14 +00:00
InventorySyncRun.php 046-inventory-sync-button (#47) 2026-01-09 22:15:04 +00:00
OperationRun.php 054-unify-runs-suitewide (#63) 2026-01-17 22:25:00 +00:00
PlatformUser.php feat: implement auth structure system panel (#77) 2026-01-27 21:49:18 +00:00
Policy.php feat/005-bulk-operations (#5) 2025-12-25 13:32:36 +00:00
PolicyVersion.php feat/005-bulk-operations (#5) 2025-12-25 13:32:36 +00:00
ProviderConnection.php feat: unify provider connection actions and notifications (#73) 2026-01-25 01:01:37 +00:00
ProviderCredential.php feat: unify provider connection actions and notifications (#73) 2026-01-25 01:01:37 +00:00
RestoreRun.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
SettingsCatalogCategory.php dev-merges/c709b36 (#3) 2025-12-21 23:15:12 +00:00
SettingsCatalogDefinition.php feat: merge 001-filament-json 2025-12-14 20:23:18 +01:00
Tenant.php feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
TenantMembership.php 062-tenant-rbac-v1 (#74) 2026-01-25 15:27:39 +00:00
TenantPermission.php feat: TenantPilot v1 - Complete implementation (Phases 1-12) 2025-12-12 02:27:54 +01:00
TenantRoleMapping.php 062-tenant-rbac-v1 (#74) 2026-01-25 15:27:39 +00:00
User.php feat: workspace context enforcement (specs 070–072) (#85) 2026-02-02 10:07:41 +00:00
UserTenantPreference.php feat/031-tenant-portfolio-context-switch (#32) 2026-01-04 21:28:08 +00:00
Workspace.php feat: workspace context enforcement (specs 070–072) (#85) 2026-02-02 10:07:41 +00:00
WorkspaceMembership.php feat: workspace context enforcement (specs 070–072) (#85) 2026-02-02 10:07:41 +00:00