TenantAtlas/app/Services
ahmido 55166cf9b8 Spec 083: Required permissions hardening (canonical /admin/tenants, DB-only, 404 semantics) (#101)
Implements Spec 083 (Canonical Required Permissions manage surface hardening + issues-first UX).

Highlights:
- Enforces canonical route: /admin/tenants/{tenant}/required-permissions
- Legacy tenant-plane URL /admin/t/{tenant}/required-permissions stays non-existent (404)
- Deny-as-not-found (404) for non-workspace members and non-tenant-entitled users
- Strict tenant resolution (no cross-plane fallback)
- DB-only render (no external provider calls on page load)
- Issues-first layout + canonical next-step links (re-run verification -> /admin/onboarding)
- Freshness/stale detection (missing or >30 days -> warning)

Tests (Sail):
- vendor/bin/sail artisan test --compact tests/Feature/RequiredPermissions
- vendor/bin/sail artisan test --compact tests/Unit/TenantRequiredPermissionsFreshnessTest.php tests/Unit/TenantRequiredPermissionsOverallStatusTest.php

Notes:
- Filament v5 / Livewire v4 compliant.
- No destructive actions added in this spec; link-only CTAs.

Co-authored-by: Ahmed Darrazi <ahmeddarrazi@MacBookPro.fritz.box>
Reviewed-on: #101
2026-02-08 23:13:25 +00:00
..
Audit feat: unified managed tenant onboarding wizard (#88) 2026-02-03 17:30:15 +00:00
Auth Spec 075: Verification Checklist Framework V1.5 (fingerprint + acknowledgements) (#93) 2026-02-05 21:44:19 +00:00
BackupScheduling feat/032-backup-scheduling-mvp (#36) 2026-01-07 01:12:12 +00:00
Directory 051-entra-group-directory-cache (#57) 2026-01-11 23:24:12 +00:00
Drift feat/044-drift-mvp (#58) 2026-01-14 23:16:10 +00:00
Graph Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00
Intune Spec 083: Required permissions hardening (canonical /admin/tenants, DB-only, 404 semantics) (#101) 2026-02-08 23:13:25 +00:00
Inventory Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00
Operations 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
Providers Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00
Verification Spec 075: Verification Checklist Framework V1.5 (fingerprint + acknowledgements) (#93) 2026-02-05 21:44:19 +00:00
AdapterRunReconciler.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
AssignmentBackupService.php feat/009-app-protection-policy (#11) 2025-12-29 16:11:50 +00:00
AssignmentRestoreService.php feat/009-app-protection-policy (#11) 2025-12-29 16:11:50 +00:00
OperationRunService.php Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00