TUM2026

Active
MSP IT admin dashboard for managing client tenants. Integrates Microsoft Graph API (Azure AD users/groups/licenses), NinjaOne RMM, and Sophos Central per tenant. Each tenant has its own Azure App Registration credentials stored in the DB. · Live · GitHub
✅
10
Done
🔄
0
In Progress
⛔
0
Blocked
📋
7
Backlog
📋 Backlog7
**\*\***CSP nonce for styles**\*\***
BLOCKED — Tailwind v4 has no nonce support yet. Monitor Tailwind v4 releases.
⛔ BLOCKED — Tailwind v4 has no nonce support yet. Monitor Tailwind v4 releases.
SecurityFrontend
**\*\***Configure AdAgentId for remaining tenants**\*\***
Operational DB action needed — set per-tenant AdAgentId values
opsDB
**\*\***Rotate Azure AD credentials**\*\***
BLOCKED — client dependency. Schedule rotation window with client.
⛔ BLOCKED — client dependency. Schedule rotation window with client.
Securityops
**\*\***NinjaOne device management integration**\*\***
Add device list + patch status per tenant via NinjaOne management scope
Featureninjaone
**\*\***Sophos threat dashboard**\*\***
Per-tenant threat event feed from Sophos Central Partner API
Featuresophos
**\*\***Expand rate limiting to all protected routes**\*\***
reportReadRatelimit applied to 6 routes — verify full coverage, add where missing
SecurityBackend
**\*\***Graph $batch for large tenant user lists**\*\***
Split >20 user/group fetches into multiple sequential $batch calls
performancegraph
🔄 In Progress0
Vacío
⛔ Blocked0
Vacío
✅ Done10
**\*\***Security audit report v10** (2026-05-12)\*\***
Securityshipped
**\*\***CI pipeline: typecheck + unit-tests stages**\*\***
ci-cdshipped
**\*\***GDPR AuditLog userId FK — ON DELETE SET NULL**\*\***
SecurityDBshipped
**\*\***middleware.ts → proxy.ts**\*\***
fixshipped
**\*\***RBAC: updateTenant / create / delete require ADMIN role**\*\***
SecurityAuthshipped
**\*\***reportReadRatelimit (50 req/min) on all 6 report/search/analytics routes**\*\***
Securityshipped
**\*\***Monolith architecture confirmed**\*\***
architectureshipped
**\*\***Turbopack + Prisma init-server + global + Proxy pattern**\*\***
fixshipped
**\*\***Microsoft Graph client credentials flow**\*\***
Featureshipped
**\*\***NinjaOne + Sophos API clients**\*\***
Featureshipped
📓 Daily Recaps