ahmido/TenantAtlas
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects 1 Releases Wiki Activity
dd175c16a1
TenantAtlas/apps/platform
History
ahmido dd175c16a1 fix: tighten workspace RBAC access boundaries (#364) 
## Summary
- tighten workspace RBAC and panel access boundaries
- remove non-owner workspace membership management capability from workspace role mapping
- add focused boundary coverage for admin panel, managed environments, providers, review packs, operation runs, finding exceptions, and workspace role capabilities
- include spec artifacts for feature 309

## Testing
- cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/Auth/WorkspaceFirstManagedEnvironmentAccessTest.php tests/Feature/Rbac/RoleMatrix/ManagerAccessTest.php tests/Feature/Rbac/WorkspaceMembershipsRelationManagerUiEnforcementTest.php tests/Feature/Rbac/AdminPanelAccessBoundaryTest.php tests/Feature/Rbac/FindingExceptionLifecycleAccessBoundaryTest.php tests/Feature/Rbac/ManagedEnvironmentAccessBoundaryTest.php tests/Feature/Rbac/OperationRunAccessBoundaryTest.php tests/Feature/Rbac/ProviderConnectionAccessBoundaryTest.php tests/Feature/Rbac/ReviewPackAccessBoundaryTest.php tests/Feature/Rbac/SystemPanelAccessBoundaryTest.php tests/Feature/Rbac/WorkspaceRoleCapabilityBoundaryTest.php tests/Unit/Auth/CapabilityResolverTest.php tests/Unit/Auth/WorkspaceRoleCapabilityMapTest.php
- cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #364
2026-05-15 14:00:21 +00:00
..
.pnpm-store/v10 Spec 235: harden baseline truth and onboarding flows (#271) 2026-04-24 05:44:54 +00:00
app fix: tighten workspace RBAC access boundaries (#364) 2026-05-15 14:00:21 +00:00
bootstrap feat: complete workspace-first environment routing cutover (#340) 2026-05-07 21:56:14 +00:00
config refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
database refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
drizzle Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
lang feat: implement decision register summary in environment review packs (#363) 2026-05-15 12:54:41 +00:00
public Automated: 268-operationrun-activity-feedback — commit & PR (#324) 2026-05-04 12:17:15 +00:00
resources feat: implement decision register summary in environment review packs (#363) 2026-05-15 12:54:41 +00:00
routes refactor: consolidate internal tenant model naming (#355) 2026-05-14 11:13:28 +00:00
storage Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
tests fix: tighten workspace RBAC access boundaries (#364) 2026-05-15 14:00:21 +00:00
.env.example feat(specs/256): external support desk handoff (#301) 2026-04-29 20:16:40 +00:00
artisan Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
composer.json feat: implement runtime trend recalibration reporting (#244) 2026-04-18 07:36:05 +00:00
composer.lock Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
drizzle.config.ts Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00
package.json feat: implement workspace foundation website app (#214) 2026-04-08 12:20:31 +00:00
patch_aside.php Auto: 266-tenant-dashboard-productization-v1 → platform-dev (#322) 2026-05-03 14:03:46 +00:00
patch_readiness.php Auto: 266-tenant-dashboard-productization-v1 → platform-dev (#322) 2026-05-03 14:03:46 +00:00
patch_test.php Auto: 266-tenant-dashboard-productization-v1 → platform-dev (#322) 2026-05-03 14:03:46 +00:00
patch_view.php Auto: 266-tenant-dashboard-productization-v1 → platform-dev (#322) 2026-05-03 14:03:46 +00:00
patch.diff Auto: 266-tenant-dashboard-productization-v1 → platform-dev (#322) 2026-05-03 14:03:46 +00:00
phpunit.pgsql.xml Spec 206: implement test suite governance foundation (#239) 2026-04-16 13:58:50 +00:00
phpunit.xml Spec 206: implement test suite governance foundation (#239) 2026-04-16 13:58:50 +00:00
pnpm-lock.yaml feat: compress governance operator outcomes (#253) 2026-04-19 12:30:36 +00:00
revert.php Auto: 266-tenant-dashboard-productization-v1 → platform-dev (#322) 2026-05-03 14:03:46 +00:00
vite.config.js Spec 182: relocate Laravel platform to apps/platform (#213) 2026-04-08 08:40:47 +00:00