3b1dd98f52
This commit introduces a comprehensive Role-Based Access Control (RBAC) system for TenantAtlas. - Implements authentication via Microsoft Entra ID (OIDC). - Manages authorization on a per-Suite-Tenant basis using a table. - Follows a capabilities-first approach, using Gates and Policies. - Includes a break-glass mechanism for platform superadmins. - Adds policies for bootstrapping tenants and managing admin responsibilities.
19 lines
641 B
PHP
19 lines
641 B
PHP
@php
|
|
/** @var \App\Models\User|null $user */
|
|
$user = auth()->user();
|
|
@endphp
|
|
|
|
@if ($user instanceof \App\Models\User && $user->isPlatformSuperadmin())
|
|
<div class="fi-topbar sticky top-0 z-50 border-b border-red-500/30 bg-red-600 text-white">
|
|
<div class="mx-auto flex max-w-screen-2xl items-center justify-between gap-4 px-4 py-2">
|
|
<div class="text-sm font-semibold">
|
|
Break-glass mode: platform superadmin access
|
|
</div>
|
|
|
|
<div class="text-xs opacity-90">
|
|
Use for recovery only. All actions are audited.
|
|
</div>
|
|
</div>
|
|
</div>
|
|
@endif
|