TenantAtlas/app/Filament
ahmido 55166cf9b8 Spec 083: Required permissions hardening (canonical /admin/tenants, DB-only, 404 semantics) (#101)
Implements Spec 083 (Canonical Required Permissions manage surface hardening + issues-first UX).

Highlights:
- Enforces canonical route: /admin/tenants/{tenant}/required-permissions
- Legacy tenant-plane URL /admin/t/{tenant}/required-permissions stays non-existent (404)
- Deny-as-not-found (404) for non-workspace members and non-tenant-entitled users
- Strict tenant resolution (no cross-plane fallback)
- DB-only render (no external provider calls on page load)
- Issues-first layout + canonical next-step links (re-run verification -> /admin/onboarding)
- Freshness/stale detection (missing or >30 days -> warning)

Tests (Sail):
- vendor/bin/sail artisan test --compact tests/Feature/RequiredPermissions
- vendor/bin/sail artisan test --compact tests/Unit/TenantRequiredPermissionsFreshnessTest.php tests/Unit/TenantRequiredPermissionsOverallStatusTest.php

Notes:
- Filament v5 / Livewire v4 compliant.
- No destructive actions added in this spec; link-only CTAs.

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #101
2026-02-08 23:13:25 +00:00
..
Clusters/Inventory 058-tenant-ui-polish (#70) 2026-01-22 00:17:23 +00:00
Concerns 065-tenant-rbac-v1 (#79) 2026-01-28 21:09:47 +00:00
Pages Spec 083: Required permissions hardening (canonical /admin/tenants, DB-only, 404 semantics) (#101) 2026-02-08 23:13:25 +00:00
Resources feat: action-surface contract inspect affordance + clickable rows (#100) 2026-02-08 20:31:36 +00:00
Support Spec 075: Verification Checklist Framework V1.5 (fingerprint + acknowledgements) (#93) 2026-02-05 21:44:19 +00:00
System/Pages feat: workspace context enforcement + ownership safeguards (#86) 2026-02-02 23:00:56 +00:00
Widgets Spec 078: Operations tenantless canonical detail (#95) 2026-02-07 09:07:26 +00:00