ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
ae0e0a0674
TenantAtlas/apps/platform/app/Services/Auth
History
ahmido c7b38606a9 feat: implement spec 285 workspace-first environment access (#344) 
Implements platform feature branch `285-workspace-rbac-environment-access`.

Summary:
- switch managed environment authorization to workspace-first role resolution with explicit environment-scope narrowing
- rewire Filament pages, resources, policies, and user tenant access helpers to the shared access-scope resolver
- add Spec 285 coverage across unit, feature, and browser tests plus full spec artifacts

Validation:
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Unit/Auth/WorkspaceFirstCapabilityResolverTest.php tests/Unit/Auth/ManagedEnvironmentAccessScopeResolverTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Auth/WorkspaceFirstManagedEnvironmentAccessTest.php tests/Feature/Filament/ManagedEnvironmentAccessScopeManagementTest.php tests/Feature/Filament/WorkspaceMembershipRoleManagementTest.php tests/Feature/Rbac/GovernanceArtifactsWorkspaceFirstAuthorizationTest.php tests/Feature/Rbac/OperationRunWorkspaceFirstAuthorizationTest.php tests/Feature/Rbac/ProviderConnectionWorkspaceFirstPolicyTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Verification/ProviderExecutionReauthorizationTest.php tests/Feature/ProviderConnections/ProviderConnectionHealthCheckStartSurfaceTest.php tests/Feature/Tenants/TenantProviderBackedActionStartTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Audit/TenantMembershipAuditLogTest.php tests/Feature/Filament/TenantMembersTest.php tests/Feature/TenantRBAC/TenantMembershipCrudTest.php tests/Feature/TenantRBAC/TenantSwitcherScopeTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Browser/Spec285WorkspaceRbacEnvironmentAccessSmokeTest.php`
- `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent`

Target branch: `platform-dev`.

Follow-up integration path after merge:
- `platform-dev` -> `dev`.

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #344
2026-05-09 12:40:50 +00:00
..
BreakGlassSession.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
CapabilityResolver.php feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
ManagedEnvironmentAccessDecision.php feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
ManagedEnvironmentAccessScopeResolver.php feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
PostLoginRedirectResolver.php Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
RoleCapabilityMap.php 277-stored-reports-surface → platform-dev (#333) 2026-05-06 00:04:53 +00:00
SupportAccessGrantManager.php PR: 276-support-access-governance → platform-dev (#332) 2026-05-05 21:54:26 +00:00
SupportAccessGrantResolver.php PR: 276-support-access-governance → platform-dev (#332) 2026-05-05 21:54:26 +00:00
TenantDiagnosticsService.php feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
TenantMembershipManager.php feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
WorkspaceCapabilityResolver.php feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
WorkspaceMembershipManager.php feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
WorkspaceRoleCapabilityMap.php feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00