ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
9f5c99317b
TenantAtlas/tests/Unit
History
ahmido 0dc79520a4 feat: provider access hardening (RBAC write gate) (#132) 
Implements provider access hardening for Intune write operations:

- RBAC-based write gate with configurable staleness thresholds
- Gate enforced at restore start and in jobs (execute + assignments)
- UI affordances: disabled rerun action, tenant RBAC status card, refresh RBAC action
- Audit logging for blocked writes
- Ops UX label: `rbac.health_check` now displays as “RBAC health check”
- Adds/updates Pest tests and SpecKit artifacts for feature 108

Notes:
- Filament v5 / Livewire v4 compliant.
- Destructive actions require confirmation.
- Assets: no new global assets.

Tested:
- `vendor/bin/sail artisan test --compact` (suite previously green) + focused OpsUx tests for OperationCatalog labels.
- `vendor/bin/sail bin pint --dirty`.

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #132
2026-02-23 00:49:37 +00:00
..
Alerts feat(alerts): Monitoring cluster + v1 resources (spec 099) (#121) 2026-02-18 15:20:43 +00:00
Auth Spec 094: Assignment ops observability hardening (#113) 2026-02-15 14:08:14 +00:00
BackupScheduling fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
Badge feat: provider access hardening (RBAC write gate) (#132) 2026-02-23 00:49:37 +00:00
Badges feat: Workspace settings slices v1 (backup, drift, operations) (#120) 2026-02-16 03:18:33 +00:00
DirectoryGroups 051-entra-group-directory-cache (#57) 2026-01-11 23:24:12 +00:00
Filament feat(spec-089): provider connections tenantless UI (#107) 2026-02-12 16:35:13 +00:00
Hardening feat: provider access hardening (RBAC write gate) (#132) 2026-02-23 00:49:37 +00:00
Intune feat(spec-088): remove tenant graphOptions legacy path (#105) 2026-02-12 10:14:44 +00:00
Inventory feat/040-inventory-core (#43) 2026-01-07 14:54:24 +00:00
Operations 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
OpsUx feat: Spec 105 — Entra Admin Roles Evidence + Findings (#128) 2026-02-22 02:37:36 +00:00
Policies 085-tenant-operate-hub (#103) 2026-02-11 13:02:03 +00:00
Providers feat(spec-087): remove legacy runs (#106) 2026-02-12 12:40:51 +00:00
SettingsFoundation Settings foundation: workspace controls (#119) 2026-02-16 01:11:24 +00:00
Support/Rbac 066-rbac-ui-enforcement-helper (#81) 2026-01-30 16:58:02 +00:00
AppProtectionPolicyNormalizerTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
AssignmentBackupServiceTest.php feat(spec-088): remove tenant graphOptions legacy path (#105) 2026-02-12 10:14:44 +00:00
AssignmentFetcherTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
AssignmentFilterResolverTest.php feat(spec-088): remove tenant graphOptions legacy path (#105) 2026-02-12 10:14:44 +00:00
AssignmentRestoreServiceTest.php Spec 094: Assignment ops observability hardening (#113) 2026-02-15 14:08:14 +00:00
AuditContextSanitizerTest.php Spec 075: Verification Checklist Framework V1.5 (fingerprint + acknowledgements) (#93) 2026-02-05 21:44:19 +00:00
BackupItemTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
BulkActionPermissionTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
BulkBackupSetDeleteJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkBackupSetForceDeleteJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkBackupSetRestoreJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkOperationAbortMethodTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkOperationRunProgressTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkOperationRunStatusBucketTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkPolicyDeleteJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkPolicyExportJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkPolicyVersionForceDeleteJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkPolicyVersionPruneJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkPolicyVersionRestoreJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkRestoreRunDeleteJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
BulkRestoreRunRestoreJobTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
CircuitBreakerTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
CompliancePolicyNormalizerTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
CoverageCapabilitiesResolverTest.php feat/047-inventory-foundations-nodes (#51) 2026-01-10 20:47:29 +00:00
DefaultPolicyNormalizerDiffTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
DependencyExtractionServiceTest.php feat/042-inventory-dependencies-graph (#50) 2026-01-10 12:50:08 +00:00
DependencyTargetResolverTest.php feat/042-inventory-dependencies-graph (#50) 2026-01-10 12:50:08 +00:00
DeviceConfigurationPolicyNormalizerTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
ExampleTest.php Initial commit from Specify template 2025-12-10 22:27:21 +01:00
FoundationMappingServiceTest.php feat(spec-088): remove tenant graphOptions legacy path (#105) 2026-02-12 10:14:44 +00:00
FoundationSnapshotServiceTest.php feat(spec-088): remove tenant graphOptions legacy path (#105) 2026-02-12 10:14:44 +00:00
GraphClientEndpointResolutionTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
GraphClientScopeTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
GraphContractFallbackTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
GraphContractRegistryActualDataTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
GraphContractRegistryOnboardingProbesTest.php 073-unified-managed-tenant-onboarding-wizard (#90) 2026-02-04 23:30:55 +00:00
GraphContractRegistrySettingsApplySanitizerTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
GraphContractRegistrySettingsWriteStrategyTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
GraphContractRegistryTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
GroupResolverTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
InventoryLinkTest.php feat/042-inventory-dependencies-graph (#49) 2026-01-10 00:20:14 +00:00
ManagedDeviceAppConfigurationNormalizerTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
MicrosoftGraphClientListPoliciesSelectTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
MicrosoftGraphClientRetryPolicyTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
MicrosoftGraphClientTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
ODataTypeValidationTest.php feat/011-restore-run-wizard (#37) 2026-01-07 01:40:04 +00:00
PolicyCaptureOrchestratorTest.php feat(spec-088): remove tenant graphOptions legacy path (#105) 2026-02-12 10:14:44 +00:00
PolicyNormalizerRoutingTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
PolicyNormalizerSettingsCatalogFlattenTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
PolicyNormalizerSettingsCatalogTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
PolicyNormalizerTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
PolicyPickerOptionLabelTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
PolicySnapshotServiceTest.php Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00
PolicyVersionEligibilityTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
RbacOnboardingServiceTest.php Spec 096: Ops polish (assignment summaries + dedupe + reconcile tracking + seed DX) (#115) 2026-02-15 20:49:38 +00:00
RequiredPermissionsLinksTest.php feat(spec-080): workspace-managed tenant administration migration (#97) 2026-02-07 19:45:13 +00:00
RestoreRunDeletableTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
RestoreRunTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
RunIdempotencyTest.php 056-remove-legacy-bulkops (#65) 2026-01-19 23:27:52 +00:00
ScopeTagResolverTest.php Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00
ScriptsPolicyNormalizerTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
SettingsCatalogPolicyNormalizerTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
TenantCurrentTest.php feat: unified managed tenant onboarding wizard (#88) 2026-02-03 17:30:15 +00:00
TenantPermissionCheckClustersTest.php Spec 081: Provider connection cutover (#98) 2026-02-08 11:28:51 +00:00
TenantPermissionServiceTest.php Fix tenant permission inserts missing workspace_id (#118) 2026-02-16 00:58:34 +00:00
TenantRequiredPermissionsCopyPayloadTest.php Spec 076: Tenant Required Permissions (enterprise remediation UX) (#92) 2026-02-05 22:08:51 +00:00
TenantRequiredPermissionsFeatureImpactTest.php Spec 076: Tenant Required Permissions (enterprise remediation UX) (#92) 2026-02-05 22:08:51 +00:00
TenantRequiredPermissionsFilteringTest.php Spec 076: Tenant Required Permissions (enterprise remediation UX) (#92) 2026-02-05 22:08:51 +00:00
TenantRequiredPermissionsFreshnessTest.php Spec 083: Required permissions hardening (canonical /admin/tenants, DB-only, 404 semantics) (#101) 2026-02-08 23:13:25 +00:00
TenantRequiredPermissionsOverallStatusTest.php Spec 083: Required permissions hardening (canonical /admin/tenants, DB-only, 404 semantics) (#101) 2026-02-08 23:13:25 +00:00
TenantResourceConsentUrlTest.php fix(onboarding): preserve workspace scope and consent flow (#117) 2026-02-15 22:27:55 +00:00
TenantScopeTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00
VerificationReportSanitizerEvidenceKindsTest.php Spec 076: Tenant Required Permissions (enterprise remediation UX) (#92) 2026-02-05 22:08:51 +00:00
VerificationReportSanitizerNextStepsUrlTest.php fix(onboarding): preserve workspace scope and consent flow (#117) 2026-02-15 22:27:55 +00:00
VersionDiffTest.php feat: TenantPilot v1 - Complete implementation (Phases 1-12) 2025-12-12 02:27:54 +01:00
WindowsDriverUpdateProfileNormalizerTest.php fix(tests): remove per-file TestCase uses (#45) 2026-01-08 00:41:46 +00:00