ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
bf43dad3d1
TenantAtlas/apps/platform/app/Services
History
ahmido dd175c16a1 fix: tighten workspace RBAC access boundaries (#364) 
## Summary
- tighten workspace RBAC and panel access boundaries
- remove non-owner workspace membership management capability from workspace role mapping
- add focused boundary coverage for admin panel, managed environments, providers, review packs, operation runs, finding exceptions, and workspace role capabilities
- include spec artifacts for feature 309

## Testing
- cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Auth/WorkspaceFirstManagedEnvironmentAccessTest.php tests/Feature/Rbac/RoleMatrix/ManagerAccessTest.php tests/Feature/Rbac/WorkspaceMembershipsRelationManagerUiEnforcementTest.php tests/Feature/Rbac/AdminPanelAccessBoundaryTest.php tests/Feature/Rbac/FindingExceptionLifecycleAccessBoundaryTest.php tests/Feature/Rbac/ManagedEnvironmentAccessBoundaryTest.php tests/Feature/Rbac/OperationRunAccessBoundaryTest.php tests/Feature/Rbac/ProviderConnectionAccessBoundaryTest.php tests/Feature/Rbac/ReviewPackAccessBoundaryTest.php tests/Feature/Rbac/SystemPanelAccessBoundaryTest.php tests/Feature/Rbac/WorkspaceRoleCapabilityBoundaryTest.php tests/Unit/Auth/CapabilityResolverTest.php tests/Unit/Auth/WorkspaceRoleCapabilityMapTest.php
- cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #364
2026-05-15 14:00:21 +00:00
..
Alerts feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Audit refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
Auth fix: tighten workspace RBAC access boundaries (#364) 2026-05-15 14:00:21 +00:00
BackupScheduling feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Baselines refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
Directory feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Drift feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Entitlements feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
EntraAdminRoles feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
EnvironmentReviews feat: implement decision register summary in environment review packs (#363) 2026-05-15 12:54:41 +00:00
Evidence feat: implement decision register summary in environment review packs (#363) 2026-05-15 12:54:41 +00:00
Findings feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
Graph feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Hardening feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Intune refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
Inventory feat: complete workspace-first environment routing cutover (#340) 2026-05-07 21:56:14 +00:00
Localization refactor: remove findings lifecycle backfill runtime surfaces (#294) 2026-04-28 22:00:51 +00:00
Onboarding refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
Operations refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
PermissionPosture refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
PortfolioCompare refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
PortfolioTriage refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
Providers Complete Spec 287 prerequisite cutover (#346) 2026-05-10 18:22:34 +00:00
Runbooks refactor: remove findings lifecycle backfill runtime surfaces (#294) 2026-04-28 22:00:51 +00:00
Settings feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
System feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
SystemConsole refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
Tenants refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
Verification feat: normalize provider connection scope contracts (#339) 2026-05-07 19:28:42 +00:00
Workspaces feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
AdapterRunReconciler.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
AssignmentBackupService.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
AssignmentRestoreService.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
OperationRunService.php feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
ReviewPackService.php refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00