TenantAtlas/apps/platform/app/Models
ahmido c7b38606a9 feat: implement spec 285 workspace-first environment access (#344)
Implements platform feature branch `285-workspace-rbac-environment-access`.

Summary:
- switch managed environment authorization to workspace-first role resolution with explicit environment-scope narrowing
- rewire Filament pages, resources, policies, and user tenant access helpers to the shared access-scope resolver
- add Spec 285 coverage across unit, feature, and browser tests plus full spec artifacts

Validation:
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Unit/Auth/WorkspaceFirstCapabilityResolverTest.php tests/Unit/Auth/ManagedEnvironmentAccessScopeResolverTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Auth/WorkspaceFirstManagedEnvironmentAccessTest.php tests/Feature/Filament/ManagedEnvironmentAccessScopeManagementTest.php tests/Feature/Filament/WorkspaceMembershipRoleManagementTest.php tests/Feature/Rbac/GovernanceArtifactsWorkspaceFirstAuthorizationTest.php tests/Feature/Rbac/OperationRunWorkspaceFirstAuthorizationTest.php tests/Feature/Rbac/ProviderConnectionWorkspaceFirstPolicyTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Verification/ProviderExecutionReauthorizationTest.php tests/Feature/ProviderConnections/ProviderConnectionHealthCheckStartSurfaceTest.php tests/Feature/Tenants/TenantProviderBackedActionStartTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Audit/TenantMembershipAuditLogTest.php tests/Feature/Filament/TenantMembersTest.php tests/Feature/TenantRBAC/TenantMembershipCrudTest.php tests/Feature/TenantRBAC/TenantSwitcherScopeTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Browser/Spec285WorkspaceRbacEnvironmentAccessSmokeTest.php`
- `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent`

Target branch: `platform-dev`.

Follow-up integration path after merge:
- `platform-dev` -> `dev`.

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #344
2026-05-09 12:40:50 +00:00
..
AlertDelivery.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
AlertDestination.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
AlertRule.php feat: implement findings notifications escalation (#261) 2026-04-22 00:54:38 +00:00
AlertRuleDestination.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
AuditLog.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
BackupItem.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
BackupSchedule.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
BackupSet.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
BaselineProfile.php cleanup: retire dead transitional residue (#270) 2026-04-23 16:54:48 +00:00
BaselineSnapshot.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
BaselineSnapshotItem.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
BaselineTenantAssignment.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
EntraGroup.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
EntraRoleDefinition.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
EvidenceSnapshot.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
EvidenceSnapshotItem.php feat: implement provider-neutral artifact source taxonomy (#343) 2026-05-08 23:47:31 +00:00
Finding.php feat: implement provider-neutral artifact source taxonomy (#343) 2026-05-08 23:47:31 +00:00
FindingException.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
FindingExceptionDecision.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
FindingExceptionEvidenceReference.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
InventoryItem.php feat: implement provider-neutral artifact source taxonomy (#343) 2026-05-08 23:47:31 +00:00
InventoryLink.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ManagedEnvironment.php feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
ManagedEnvironmentMembership.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
OperationalControlActivation.php Remove Findings lifecycle backfill operational surface (controls slice) (#280) 2026-04-26 15:43:47 +00:00
OperationRun.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
PlatformUser.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
Policy.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
PolicyVersion.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ProductUsageEvent.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ProviderConnection.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ProviderCredential.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
RestoreRun.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
ReviewPack.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
SettingsCatalogCategory.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
SettingsCatalogDefinition.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
StoredReport.php feat: implement provider-neutral artifact source taxonomy (#343) 2026-05-08 23:47:31 +00:00
SupportAccessGrant.php PR: 276-support-access-governance → platform-dev (#332) 2026-05-05 21:54:26 +00:00
SupportRequest.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantOnboardingSession.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantPermission.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantReview.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantReviewSection.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantRoleMapping.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantSetting.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantTriageReview.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
User.php feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
UserTenantPreference.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
VerificationCheckAcknowledgement.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Workspace.php feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
WorkspaceMembership.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
WorkspaceSetting.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
WorkspaceSubscription.php 274: Billing subscription truth - add workspace subscription model & tests (#326) 2026-05-04 21:15:57 +00:00