ahmido
acc8947384
## Summary - add the Spec 194 governance action catalog, friction classes, reason policies, and regression guards - align exception, review, evidence, finding, tenant, provider connection, and system run actions to the shared semantics model - add focused feature, RBAC, audit, unit, and browser coverage, including the tenant detail triage header consistency update ## Verification - ran the focused Spec 194 verification pack from the quickstart and task plan - ran targeted tenant triage coverage after the detail-header update - ran `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent` ## Filament Notes - Filament v5 / Livewire v4 compliance preserved - provider registration remains in `apps/platform/bootstrap/providers.php` - globally searchable resources were not changed - destructive actions remain confirmation-gated and server-authorized - no new Filament assets were introduced; the existing `cd apps/platform && php artisan filament:assets` deploy step stays unchanged Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #229
76 lines
2.9 KiB
PHP
76 lines
2.9 KiB
PHP
<?php
|
|
|
|
namespace App\Filament\Resources\ProviderConnectionResource\Pages;
|
|
|
|
use App\Filament\Resources\ProviderConnectionResource;
|
|
use App\Models\ProviderConnection;
|
|
use App\Models\Tenant;
|
|
use App\Support\Auth\Capabilities;
|
|
use App\Support\Links\RequiredPermissionsLinks;
|
|
use App\Support\Rbac\UiEnforcement;
|
|
use Filament\Actions;
|
|
use Filament\Resources\Pages\ViewRecord;
|
|
|
|
class ViewProviderConnection extends ViewRecord
|
|
{
|
|
protected static string $resource = ProviderConnectionResource::class;
|
|
|
|
protected function getHeaderActions(): array
|
|
{
|
|
$tenant = $this->currentTenant();
|
|
|
|
return [
|
|
UiEnforcement::forAction(
|
|
Actions\Action::make('grant_admin_consent')
|
|
->label('Grant admin consent')
|
|
->icon('heroicon-o-clipboard-document')
|
|
->url(function () use ($tenant): ?string {
|
|
return $tenant instanceof Tenant
|
|
? RequiredPermissionsLinks::adminConsentPrimaryUrl($tenant)
|
|
: null;
|
|
})
|
|
->visible(fn (): bool => $tenant instanceof Tenant)
|
|
->openUrlInNewTab()
|
|
)
|
|
->requireCapability(Capabilities::PROVIDER_MANAGE)
|
|
->apply(),
|
|
Actions\ActionGroup::make($this->sharedConnectionActions())
|
|
->label('More')
|
|
->icon('heroicon-o-ellipsis-vertical')
|
|
->color('gray'),
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @return array<int, Actions\Action>
|
|
*/
|
|
private function sharedConnectionActions(): array
|
|
{
|
|
return [
|
|
ProviderConnectionResource::makeEditNavigationAction(),
|
|
ProviderConnectionResource::makeCheckConnectionAction(),
|
|
ProviderConnectionResource::makeInventorySyncAction(),
|
|
ProviderConnectionResource::makeComplianceSnapshotAction(),
|
|
ProviderConnectionResource::makeSetDefaultAction(),
|
|
ProviderConnectionResource::makeEnableDedicatedOverrideAction(
|
|
source: 'provider_connection.view_page',
|
|
modalDescription: 'Dedicated credentials are stored encrypted and reset consent to the dedicated app registration.',
|
|
),
|
|
ProviderConnectionResource::makeRotateDedicatedCredentialAction(),
|
|
ProviderConnectionResource::makeDeleteDedicatedCredentialAction(),
|
|
ProviderConnectionResource::makeRevertToPlatformAction(source: 'provider_connection.view_page'),
|
|
ProviderConnectionResource::makeEnableConnectionAction(),
|
|
ProviderConnectionResource::makeDisableConnectionAction(),
|
|
];
|
|
}
|
|
|
|
private function currentTenant(): ?Tenant
|
|
{
|
|
if (! $this->record instanceof ProviderConnection) {
|
|
return null;
|
|
}
|
|
|
|
return ProviderConnectionResource::resolveTenantForRecord($this->record);
|
|
}
|
|
}
|