TenantAtlas/specs/072-managed-tenants-workspace-enforcement/tasks.md

1.1 KiB

Tasks — 072 Managed Tenants workspace context enforcement

Setup

  • T001 Confirm legacy managed-tenants routes and current workspace middleware behavior.

Tests (TDD)

  • T010 Add regression test: /admin/managed-tenants redirects to workspace landing when a workspace is selected.
  • T020 Add regression test: /admin/t/{tenant} is 404 when workspace context is missing.
  • T030 Add regression test: /admin/t/{tenant} is 404 when tenant.workspace_id mismatches current workspace.
  • T040 Add regression test: /admin/choose-tenant redirects to /admin/choose-workspace when workspace is not selected.

Core

  • T100 Create workspace-scoped Managed Tenants landing at /admin/w/{workspace}/managed-tenants.
  • T110 Make unscoped /admin/managed-tenants/* legacy-only (redirect to workspace-scoped URLs).
  • T120 Implement hard enforcement: tenant routes require workspace context and tenant.workspace_id match.
  • T130 Ensure /admin/choose-tenant requires selected workspace.

Validation

  • T900 Run Pint on dirty files.
  • T910 Run targeted Pest tests.