ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
c7b38606a9
TenantAtlas/apps/platform/app/Services
History
ahmido c7b38606a9 feat: implement spec 285 workspace-first environment access (#344) 
Implements platform feature branch `285-workspace-rbac-environment-access`.

Summary:
- switch managed environment authorization to workspace-first role resolution with explicit environment-scope narrowing
- rewire Filament pages, resources, policies, and user tenant access helpers to the shared access-scope resolver
- add Spec 285 coverage across unit, feature, and browser tests plus full spec artifacts

Validation:
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Unit/Auth/WorkspaceFirstCapabilityResolverTest.php tests/Unit/Auth/ManagedEnvironmentAccessScopeResolverTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Auth/WorkspaceFirstManagedEnvironmentAccessTest.php tests/Feature/Filament/ManagedEnvironmentAccessScopeManagementTest.php tests/Feature/Filament/WorkspaceMembershipRoleManagementTest.php tests/Feature/Rbac/GovernanceArtifactsWorkspaceFirstAuthorizationTest.php tests/Feature/Rbac/OperationRunWorkspaceFirstAuthorizationTest.php tests/Feature/Rbac/ProviderConnectionWorkspaceFirstPolicyTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Verification/ProviderExecutionReauthorizationTest.php tests/Feature/ProviderConnections/ProviderConnectionHealthCheckStartSurfaceTest.php tests/Feature/Tenants/TenantProviderBackedActionStartTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Audit/TenantMembershipAuditLogTest.php tests/Feature/Filament/TenantMembersTest.php tests/Feature/TenantRBAC/TenantMembershipCrudTest.php tests/Feature/TenantRBAC/TenantSwitcherScopeTest.php`
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Browser/Spec285WorkspaceRbacEnvironmentAccessSmokeTest.php`
- `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent`

Target branch: `platform-dev`.

Follow-up integration path after merge:
- `platform-dev` -> `dev`.

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #344
2026-05-09 12:40:50 +00:00
..
Alerts feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Audit feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Auth feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
BackupScheduling feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Baselines feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Directory feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Drift feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Entitlements feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
EntraAdminRoles feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Evidence feat: implement provider-neutral artifact source taxonomy (#343) 2026-05-08 23:47:31 +00:00
Findings feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
Graph feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Hardening feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Intune feat: implement provider capability registry (#342) 2026-05-08 21:17:05 +00:00
Inventory feat: complete workspace-first environment routing cutover (#340) 2026-05-07 21:56:14 +00:00
Localization refactor: remove findings lifecycle backfill runtime surfaces (#294) 2026-04-28 22:00:51 +00:00
Onboarding feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Operations feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
PermissionPosture feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
PortfolioCompare feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
PortfolioTriage feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
Providers feat: implement provider capability registry (#342) 2026-05-08 21:17:05 +00:00
Runbooks refactor: remove findings lifecycle backfill runtime surfaces (#294) 2026-04-28 22:00:51 +00:00
Settings feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
System feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
SystemConsole feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
TenantReviews feat: implement spec 285 workspace-first environment access (#344) 2026-05-09 12:40:50 +00:00
Tenants feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
Verification feat: normalize provider connection scope contracts (#339) 2026-05-07 19:28:42 +00:00
Workspaces feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
AdapterRunReconciler.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
AssignmentBackupService.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
AssignmentRestoreService.php feat: cut over tenant core to managed environments (#335) 2026-05-07 06:38:14 +00:00
OperationRunService.php feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00
ReviewPackService.php feat: implement workspace and tenant closure lifecycle (#337) 2026-05-07 13:12:17 +00:00