📋 PM Board
Task EP-09-T05 Kritik 09_auth erpbom-backend api

Backend — foydalanuvchi, huquq va org-node boshqaruvi REST API

Bajarildi
100% 8/8
Status:

Tavsif

09_auth ning "boshqaruv yuzasi": user CRUD va holat mashinasi, huquq guruhlari, huquq biriktirish (UC8), sessiya/audit ekranlari API'si, org-node va korxona sozlamalari. 🔴 Bu taskdagi har `409` — **ongli himoya qoidasi**, validatsiya emas: R36 (oxirgi owner) · R38 (o'ziga qarshi amal) · R46 (jim huquq yo'qotish) · R47 (huquq beruvchisiz qolish) · R49 (`system` user) · R17 (ikkinchi root). Ularning hech biri "soddalashtirish" uchun olib tashlanmaydi.

Qabul mezonlari (DoD)

0 / 2 bajarildi

  • §6.3 jadvalidagi 7 cheklovning har biri mos HTTP kodi va UPPER_SNAKE `code` bilan qaytadi

  • Har boshqaruv amali `@RequirePermission` bilan himoyalangan va auditga tushadi

Ichki ishlar

8 ta

EP-09-T05-S01 users CRUD + §4.2 holat mashinasi + R36/R38 himoyalari coder-ep-09-t05-s01
Bajarildi EP-09-T05-S02 user.disable / user.reset_password → R27 trigger ulanishi backend-1
Bajarildi EP-09-T05-S03 permission_groups CRUD — R46 va tizim guruhi immutability coder-ep-09-t05-s03
Bajarildi EP-09-T05-S04 UC8 — huquq biriktirish/olish (escalation, R36 ii, R47, perm_version) backend-1
Bajarildi EP-09-T05-S05 Sessiya va audit ekranlari API (user_session.view/.revoke, auth_log.view) coder-ep-09-t05-s05
Bajarildi EP-09-T05-S06 organizations CRUD — organization.create / .edit, R17 coder-ep-09-t05-s06
Bajarildi EP-09-T05-S07 organization_settings API (organization_setting.manage) backend-1
Bajarildi EP-09-T05-S08 GET /permissions + GET /users/{id}/permission-groups|permissions (kontrakt drift, Faza D) coder-ep-09-t05-s08
Bajarildi

Izoh qoldirish

Tarix

10 yozuv

  • ⇄

    system statusni o'zgartirdi Ishlanyapti → Bajarildi

    Bolalardan avtomatik hisoblandi

  • ⇄

    system statusni o'zgartirdi Bajarildi → Ishlanyapti

    Bolalardan avtomatik hisoblandi

  • ⇄

    system statusni o'zgartirdi Ishlanyapti → Bajarildi

    Bolalardan avtomatik hisoblandi

  • 🔗

    team-lead-ep-09 bog'liqlik qo'shdi

    → EP-09-T04

  • ✎

    team-lead-ep-09 yangiladi

    Yangilandi: estimate_hours

  • ⇄

    system statusni o'zgartirdi Bajarildi → Ishlanyapti

    Bolalardan avtomatik hisoblandi

  • ⇄

    system statusni o'zgartirdi Ishlanyapti → Bajarildi

    Bolalardan avtomatik hisoblandi

  • ⇄

    system statusni o'zgartirdi Backlog → Ishlanyapti

    Bolalardan avtomatik hisoblandi

  • 🔗

    pm-agent bog'liqlik qo'shdi

    → EP-09-T04

  • ✦

    pm-agent yaratdi

    Backend — foydalanuvchi, huquq va org-node boshqaruvi REST API

Ma'lumot

Agent
—
Olingan
—
Boshlandi
18.08.2026 05:53
Tugadi
18.08.2026 12:55
Baho
34 soat
Spec
—
Branch
—
Commit
—

Bog'liqliklar

Agent uchun

Bu ishni AI agent quyidagicha oladi:

curl -s -X POST https://pmboard.ferp.uz/api/items/EP-09-T05/claim \
  -H "X-Agent: backend-dev-1"

Tugatgach:

curl -s -X POST https://pmboard.ferp.uz/api/items/EP-09-T05/status \
  -H "X-Agent: backend-dev-1" \
  -H "Content-Type: application/json" \
  -d '{"status":"review","note":"..."}'