ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
52bb4a0afc
TenantAtlas/apps/platform/app
History
ahmido dd175c16a1 fix: tighten workspace RBAC access boundaries (#364) 
## Summary
- tighten workspace RBAC and panel access boundaries
- remove non-owner workspace membership management capability from workspace role mapping
- add focused boundary coverage for admin panel, managed environments, providers, review packs, operation runs, finding exceptions, and workspace role capabilities
- include spec artifacts for feature 309

## Testing
- cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Auth/WorkspaceFirstManagedEnvironmentAccessTest.php tests/Feature/Rbac/RoleMatrix/ManagerAccessTest.php tests/Feature/Rbac/WorkspaceMembershipsRelationManagerUiEnforcementTest.php tests/Feature/Rbac/AdminPanelAccessBoundaryTest.php tests/Feature/Rbac/FindingExceptionLifecycleAccessBoundaryTest.php tests/Feature/Rbac/ManagedEnvironmentAccessBoundaryTest.php tests/Feature/Rbac/OperationRunAccessBoundaryTest.php tests/Feature/Rbac/ProviderConnectionAccessBoundaryTest.php tests/Feature/Rbac/ReviewPackAccessBoundaryTest.php tests/Feature/Rbac/SystemPanelAccessBoundaryTest.php tests/Feature/Rbac/WorkspaceRoleCapabilityBoundaryTest.php tests/Unit/Auth/CapabilityResolverTest.php tests/Unit/Auth/WorkspaceRoleCapabilityMapTest.php
- cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #364
2026-05-15 14:00:21 +00:00
..
Console/Commands feat: retire legacy tenant route surfaces (#352) 2026-05-12 23:35:03 +00:00
Contracts/Hardening feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Exceptions 247: plans entitlements billing readiness (#287) 2026-04-27 17:35:04 +00:00
Filament feat: polish decision register evidence operation run links (#362) 2026-05-15 12:00:14 +00:00
Http refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
Jobs feat: implement decision register summary in environment review packs (#363) 2026-05-15 12:54:41 +00:00
Listeners Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
Livewire feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Models fix: tighten workspace RBAC access boundaries (#364) 2026-05-15 14:00:21 +00:00
Notifications feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Observers feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Policies refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
Providers feat: cut over admin directory groups (#358) 2026-05-14 22:44:44 +00:00
Rules Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
Services fix: tighten workspace RBAC access boundaries (#364) 2026-05-15 14:00:21 +00:00
Support feat: polish decision register evidence operation run links (#362) 2026-05-15 12:00:14 +00:00