TenantAtlas/app/Policies
ahmido fb4de17c63 feat(spec-089): provider connections tenantless UI (#107)
Implements Spec 089: moves Provider Connections to canonical tenantless route under `/admin/provider-connections`, enforces 404/403 semantics (workspace/tenant membership vs capability), adds tenant transparency (tenant column + filter + deep links), adds legacy redirects for old tenant-scoped URLs without leaking Location for 404 cases, and adds regression test coverage (RBAC semantics, filters, UI enforcement tooltips, Microsoft-only MVP scope, navigation placement).

Notes:
- Filament v5 / Livewire v4 compatible.
- Global search remains disabled for Provider Connections.
- Destructive/manage actions require confirmation and are policy-gated.

Tests:
- `vendor/bin/sail artisan test --compact tests/Feature/ProviderConnections`

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #107
2026-02-12 16:35:13 +00:00
..
BackupSchedulePolicy.php 065-tenant-rbac-v1 (#79) 2026-01-28 21:09:47 +00:00
EntraGroupPolicy.php 051-entra-group-directory-cache (#57) 2026-01-11 23:24:12 +00:00
FindingPolicy.php 066-rbac-ui-enforcement-helper (#81) 2026-01-30 16:58:02 +00:00
OperationRunPolicy.php 085-tenant-operate-hub (#103) 2026-02-11 13:02:03 +00:00
ProviderConnectionPolicy.php feat(spec-089): provider connections tenantless UI (#107) 2026-02-12 16:35:13 +00:00
WorkspaceMembershipPolicy.php feat: workspace context enforcement (specs 070–072) (#85) 2026-02-02 10:07:41 +00:00
WorkspacePolicy.php Spec 077: Workspace Global Mode + context bar redundancy cleanup (#94) 2026-02-06 22:14:53 +00:00