permissions + permission_groups + permission_group_items (katalog, AR-10 FK)

team-lead-ep-09 yangiladi

Yangilandi: pr_url

team-lead-ep-09 bog'liqlik qo'shdi

→ EP-09-T01-S01

team-lead-ep-09 yangiladi

Yangilandi: estimate_hours

qa-ep-09-t01-s02 statusni o'zgartirdi Review → Bajarildi

qa-ep-09-t01-s02 izoh qoldirdi

QA tasdiqlandi. Spec (#2.2.3, #2.3e(1)-(2)) bilan V3__permissions_catalog.sql solishtirildi: permissions(id,code UNIQUE,module,name_uz,description,default_scope_type CHECK,active), permission_groups(...,is_system,active,created_from_template_code FKsiz — ongli), permission_group_items(permission_group_id FK->permission_groups ON DELETE CASCADE, permission_code FK->permissions.code ON DELETE RESTRICT — AR-10 oddiy FK, UNIQUE(permission_group_id,permission_code)). tenant_id/organization_id yo'q (AR-1/R18). Seed (135 kod/11 guruh) qamrovi tekshirildi: spec #2.2.3 va #2.7.2 aniq 'Migratsiya emas, seed — R__ skript' deydi, demak schema-only qisqartirish TO'G'RI, spec bo'shlig'i emas. Test: flock ostida mvn -Dtest=PermissionsCatalogMigrationTest test — 10/10 yashil (BUILD SUCCESS). Mutatsiya tekshiruvi (kodni vaqtincha buzib, keyin asl holatga qaytarib): (1) permission_code FK olib tashlanganda addingItemWithUnknownPermissionCodeIsRejectedByForeignKey VA deletingPermissionInUseIsRejectedByForeignKeyRestrict ikkalasi ham qizil bo'ldi; (2) permission_group_id FK dan ON DELETE CASCADE olib tashlanganda deletingPermissionGroupCascadesToItsItems ERROR bilan qizil bo'ldi; (3) UNIQUE(permission_group_id,permission_code) olib tashlanganda sameRuleCannotBeAddedToSameGroupTwice qizil bo'ldi. Testlar yolg'onni ushlaydi — real. Fayl HEAD bilan bir xil holatda tiklandi (git diff toza). Cross-cutting: snake_case ko'plik, FK ustunlariga indeks bor, enum CHECK bilan (Postgres enum turi emas), soft-delete o'rniga spec ongli ravishda active bool tanlagan (permission_groups — sec2.3e(1): 'Soft-delete CROSS_CUTTING H, sec2.3a bilan bir xil uslub'; permissions — R22(d): DELETE yo'q, active=false). Precision/formula/outbox/auth bu subtaskka tegishli emas (sof sxema, servis qatlami yo'q).

qa-ep-09-t01-s02 qabul mezonini belgiladi

✓ `UNIQUE (permission_group_id, permission_code)` bir rule'ni guruhga ikki marta qo'shishga yo'l qo'ymaydi

qa-ep-09-t01-s02 qabul mezonini belgiladi

✓ Guruh o'chirilganda uning `permission_group_items` qatorlari CASCADE bilan o'chadi

qa-ep-09-t01-s02 qabul mezonini belgiladi

✓ `permissions` qatorini `DELETE` qilishga urinish FK RESTRICT bilan rad etiladi — R22(d)

qa-ep-09-t01-s02 qabul mezonini belgiladi

✓ Katalogda yo'q `permission_code` bilan `permission_group_items` ga yozish DB darajasida rad etiladi (`23503`) — AC13(a)

coder-ep-09-t01-s02 izoh qoldirdi

V3__permissions_catalog.sql: permissions/permission_groups/permission_group_items sxemasi (AR-10 oddiy FK). Taxmin/qaror: bu subtask FAQAT sxema — 135 rule kodi va 11 tizim guruhi seed muammosi (bootstrap R__ skripti, spec 2.7) topshiriq tavsifida so'ralmagan, shuning uchun to'qib kiritilmadi (CLAUDE.md 13-bo'lim: javobni o'zing to'qima). permission_code / permission_group_items.permission_code varchar(150) qilib tanlandi (spec aniq uzunlik bermagan); code = entity.action naqshiga yetarli zaxira bilan. Test: PermissionsCatalogMigrationTest — 10/10 yashil (Testcontainers, real PostgreSQL 16).

coder-ep-09-t01-s02 statusni o'zgartirdi Ishlanyapti → Review

coder-ep-09-t01-s02 yangiladi

Yangilandi: branch, commit_sha

coder-ep-09-t01-s02 qabul mezonini belgiladi

✓ `UNIQUE (permission_group_id, permission_code)` bir rule'ni guruhga ikki marta qo'shishga yo'l qo'ymaydi

coder-ep-09-t01-s02 qabul mezonini belgiladi

✓ Guruh o'chirilganda uning `permission_group_items` qatorlari CASCADE bilan o'chadi

coder-ep-09-t01-s02 qabul mezonini belgiladi

✓ `permissions` qatorini `DELETE` qilishga urinish FK RESTRICT bilan rad etiladi — R22(d)

coder-ep-09-t01-s02 qabul mezonini belgiladi

✓ Katalogda yo'q `permission_code` bilan `permission_group_items` ga yozish DB darajasida rad etiladi (`23503`) — AC13(a)

coder-ep-09-t01-s02 fayllarni qayd etdi

2 ta fayl qayd etildi

coder-ep-09-t01-s02 statusni o'zgartirdi Backlog → Ishlanyapti

Agent ishni boshladi

coder-ep-09-t01-s02 ishga oldi

pm-agent bog'liqlik qo'shdi

→ EP-09-T01-S01

pm-agent yaratdi

permissions + permission_groups + permission_group_items (katalog, AR-10 FK)