TenantAtlas/app/Support
ahmido 38d9826f5e feat: workspace context enforcement + ownership safeguards (#86)
Implements workspace-first enforcement and UX:
- Workspace selected before tenant flows; /admin routes into choose-workspace/choose-tenant
- Tenant lists and default tenant selection are scoped to current workspace
- Workspaces UI is tenantless at /admin/workspaces

Security hardening:
- Workspaces can never have 0 owners (blocks last-owner removal/demotion)
- Blocked attempts are audited with action_id=workspace_membership.last_owner_blocked + required metadata
- Optional break-glass recovery page to re-assign workspace owner (audited)

Tests:
- Added/updated Pest feature tests covering redirects, scoping, tenantless workspaces, last-owner guards, and break-glass recovery.

Notes:
- Filament v5 strict Page property signatures respected in RepairWorkspaceOwners.

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #86
2026-02-02 23:00:56 +00:00
..
Audit feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Auth feat: workspace context enforcement (specs 070–072) (#85) 2026-02-02 10:07:41 +00:00
Badges feat: unify provider connection actions and notifications (#73) 2026-01-25 01:01:37 +00:00
Concerns feat/027-enrollment-config-subtypes (#31) 2026-01-04 13:25:15 +00:00
Enums feat/042-inventory-dependencies-graph (#50) 2026-01-10 12:50:08 +00:00
Inventory 058-tenant-ui-polish (#70) 2026-01-22 00:17:23 +00:00
Middleware feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
OpsUx feat: unify provider connection actions and notifications (#73) 2026-01-25 01:01:37 +00:00
Rbac feat: workspace context enforcement (specs 070–072) (#85) 2026-02-02 10:07:41 +00:00
Workspaces feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
OperationCatalog.php feat: unify provider connection actions and notifications (#73) 2026-01-25 01:01:37 +00:00
OperationRunLinks.php feat: unify provider connection actions and notifications (#73) 2026-01-25 01:01:37 +00:00
OperationRunOutcome.php 054-unify-runs-suitewide (#63) 2026-01-17 22:25:00 +00:00
OperationRunStatus.php 054-unify-runs-suitewide (#63) 2026-01-17 22:25:00 +00:00
OperationRunType.php 054-unify-runs-suitewide (#63) 2026-01-17 22:25:00 +00:00
RbacReason.php Intune RBAC: graceful unsupported-account handling, health-check fixes, tests and docs updates 2025-12-13 01:25:06 +01:00
RestoreRunIdempotency.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
RestoreRunStatus.php feat/011-restore-run-wizard (#17) 2025-12-31 19:14:59 +00:00
TenantRole.php 065-tenant-rbac-v1 (#79) 2026-01-28 21:09:47 +00:00