Tenant Overrides

tenantOverrideable Flag

The flag is set at the group level in Atlas_FormCategories. Setting it to 0 blocks all tenant customisation for the entire group:

-- Allow tenants to customise forms in this group
UPDATE [dbo].[Atlas_FormCategories]
SET [TenantOverrideable] = 1
WHERE [FormCategoryID] = 130;   -- GuardRails

-- Lock down a sensitive group — no tenant overrides permitted
UPDATE [dbo].[Atlas_FormCategories]
SET [TenantOverrideable] = 0
WHERE [FormCategoryID] = 140;   -- NodePolicies (example)

What Can Be Overridden

Override Row in Atlas_Forms

-- Tenant 9001 customises GuardRail_Edit (FormID 13001)
-- TenantID is non-NULL; FormID matches the base form
IF NOT EXISTS (
    SELECT 1 FROM [dbo].[Atlas_Forms]
    WHERE [FormID] = 13001 AND [TenantID] = 9001
)
BEGIN
    INSERT INTO [dbo].[Atlas_Forms]
        ([FormID], [FormCode], [FormCategoryID], [FormTypeID],
         [PrimaryUsage], [NodeUsage], [TenantID], [IsActive], [SchemaJson])
    VALUES
        (13001, 'GuardRail_Edit', 130, 2,
         'guardrails', 'guardrail-edit', 9001, 1,
         N'{ "metadata": { "formId": 13001, "title": "Edit Policy (Acme)" },
             "controls": [
               { "id": "policy-name", "type": "text", "label": "Policy Name (Acme)" }
             ] }');
END

Load-Time Merge

The form loader always queries both the base row and any tenant row, then deep-merges them. The tenant row wins on any field it declares:

// Simplified form loading logic
async function loadForm(formId: number, tenantId: number | null): Promise<FormSchema> {
  const base = await db.query(
    'SELECT SchemaJson FROM Atlas_Forms WHERE FormID = @formId AND TenantID IS NULL',
    { formId }
  );

  if (!tenantId) return parseSchema(JSON.parse(base.SchemaJson));

  const override = await db.query(
    'SELECT SchemaJson FROM Atlas_Forms WHERE FormID = @formId AND TenantID = @tenantId',
    { formId, tenantId }
  );

  if (!override) return parseSchema(JSON.parse(base.SchemaJson));

  // Deep merge: tenant wins on conflicting keys
  const merged = deepMerge(
    JSON.parse(base.SchemaJson),
    JSON.parse(override.SchemaJson)
  );
  return parseSchema(merged);
}

What Cannot Be Overridden