Lock workspace actions when required communications are not resolved
Florian Nowarre
As a cloud foundation team, I want to be able to lock a workspace when action-required communications have not been resolved, so that I can enforce compliance actions instead of just requesting them.
Currently, the Communication Center allows sending action-required communications to workspaces with a due date. However, these are purely informational -- workspace users can ignore them entirely and continue using the workspace without any restrictions.
The email notification is easy to miss, and even when the communication is visible in the panel, it does not prevent any workspace actions.
This limits the usefulness of action-required communications for enforcing compliance, security reviews, or mandatory acknowledgements.
Requested behavior:
- Option to mark a communication as "blocking" when creating it
- When a blocking communication is unresolved (especially past its due date), workspace actions should be restricted (e.g. creating new projects, provisioning tenants, ordering building blocks)
- Workspace users should see a clear message explaining why their workspace is locked and what they need to resolve
- Once the communication is resolved, the workspace should be unlocked automatically
Use cases:
- Enforcing security questionnaire responses before allowing continued cloud usage
- Mandatory acknowledgement of breaking changes or policy updates
- Compliance reviews that must be completed within a deadline