local-it/mitgliederverwaltung
2
3
Fork 0
Code Issues 66 Pull requests 6 Projects 3 Releases Packages 1 Activity Actions

Doc: Loader auth-independent for link checks; email-sync rule rationale

Browse source
This commit is contained in:
Moritz 2026-02-03 15:00:14 +01:00
parent 4ea31f0f37
commit 4e6b7305b6
Signed by: moritz
GPG key ID: 1020A035E5DD0824
2 changed files with 9 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/email-sync.md
View file

@ -4,7 +4,7 @@
2. **DB constraints** - Prevent duplicates within same table (users.email, members.email)
3. **Custom validations** - Prevent cross-table conflicts only for linked entities
4. **Sync is bidirectional**: User ↔ Member (but User always wins on link)
5. **Linked member email change** - When a member is linked, only administrators or the linked user may change that member's email (Member resource validation `EmailChangePermission`). This keeps email sync under control and prevents non-admins from changing another user's linked member email.
5. **Linked member email change** - When a member is linked, only administrators or the linked user may change that member's email (Member resource validation `EmailChangePermission`). Because User.email wins on link and changes sync Member → User, allowing anyone to change a linked member's email would overwrite that user's account email; this rule keeps sync under control.
---