22 lines
1.6 KiB
Markdown
22 lines
1.6 KiB
Markdown
|
# Endpoint-Audit: Mandanten & Governance
|
|||
|
|
|
|||
|
|
Fortlaufend gemäß `ACCESS_LAYER_AND_GOVERNANCE_PLAN.md` Stufe A–C.
|
|||
|
|
|
|||
|
|
| Router / Bereich | Beispiel-Endpunkt | tenant-relevant | `Depends(get_tenant_context)` / Kontext | Governance geprüft (Liste+Detail) | Notizen |
|
|||
|
|
|------------------|-------------------|-----------------|----------------------------------------|-------------------------------------|---------|
|
|||
|
|
| profiles | `GET /api/profiles/me` | ja | `resolve_tenant_context` inline (`invalid_header_policy=ignore`) | teils | + `effective_club_id`; veralteter Header bricht Refresh nicht |
|
|||
|
|
| profiles | `PUT /api/profiles/{id}` | ja | — | `active_club_id` Mitgliedschaft | TenantContext später auch hier |
|
|||
|
|
| clubs | `GET /api/clubs` | ja | — | Mitgliedschaft vs Admin | Liste gefiltert Nicht-Admins |
|
|||
|
|
| clubs | CRUD Organisation | ja | — | `can_manage_club_org` / member | schrittweise auf TenantContext |
|
|||
|
|
| club_memberships | `/clubs/{id}/members*` | ja | geplant | ja | |
|
|||
|
|
| club_join_requests | `/clubs/{id}/join-requests*` | ja | geplant | ja | |
|
|||
|
|
| exercises | `GET /api/exercises`, Detail | ja | geplant | `visibility` + Mitgliedschaft | |
|
|||
|
|
| training_planning | diverse | ja | geplant | `exercise_visible` / Gruppe | |
|
|||
|
|
| training_framework_programs | diverse | ja | geplant | analog Übungen | |
|
|||
|
|
| admin_users | `GET /api/admin/users` | Plattform | optional | Admin-Rolle | |
|
|||
|
|
| Sonstige | skills, methods, catalogs | zu klären | — | oft global | Zeilen ergänzen |
|
|||
|
|
|
|||
|
|
**Legende:** „geplant“ = beim nächsten Umbau dieser Router `get_tenant_context` verwenden bzw. zentrale Governance-Helfer.
|
|||
|
|
|
|||
|
|
Letzte Änderung: 2026-05-05 (Initial)
|