TenantAtlas/app/Livewire
ahmido 38d9826f5e feat: workspace context enforcement + ownership safeguards (#86)
Implements workspace-first enforcement and UX:
- Workspace selected before tenant flows; /admin routes into choose-workspace/choose-tenant
- Tenant lists and default tenant selection are scoped to current workspace
- Workspaces UI is tenantless at /admin/workspaces

Security hardening:
- Workspaces can never have 0 owners (blocks last-owner removal/demotion)
- Blocked attempts are audited with action_id=workspace_membership.last_owner_blocked + required metadata
- Optional break-glass recovery page to re-assign workspace owner (audited)

Tests:
- Added/updated Pest feature tests covering redirects, scoping, tenantless workspaces, last-owner guards, and break-glass recovery.

Notes:
- Filament v5 strict Page property signatures respected in RepairWorkspaceOwners.

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #86
2026-02-02 23:00:56 +00:00
..
Monitoring 054-unify-runs-suitewide (#63) 2026-01-17 22:25:00 +00:00
BackupSetPolicyPickerTable.php feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
BulkOperationProgress.php 055-ops-ux-rollout (#64) 2026-01-18 14:50:15 +00:00
EntraGroupCachePickerTable.php 051-entra-group-directory-cache (#57) 2026-01-11 23:24:12 +00:00
PolicyVersionAssignmentsWidget.php 051-entra-group-directory-cache (#57) 2026-01-11 23:24:12 +00:00
SettingsCatalogSettingsTable.php dev-merges/c709b36 (#3) 2025-12-21 23:15:12 +00:00