ebbe.bassandClaude Sonnet 5.5
cb1f755761
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01N3t4WL7bd9bdHHNjEsxzqC
47 lines
2.3 KiB
Markdown
47 lines
2.3 KiB
Markdown
---
|
|
tracker_id: ""
|
|
key: ""
|
|
type: epic
|
|
title: "A user manages their own account"
|
|
parent: initiative-ping-mee-portal
|
|
covers: [CAP-2, CAP-3, CAP-4]
|
|
after: []
|
|
assignee: ""
|
|
risk: high
|
|
---
|
|
|
|
# A user manages their own account
|
|
|
|
## Description
|
|
|
|
Users change their own password, profile details, e-mail address and profile picture in the live portal. This is the main reason the portal exists: it removes the admin from known-password changes and routine profile edits.
|
|
|
|
## Outcome
|
|
|
|
Family and friends change their own password, details and picture without the admin; the first part of the spec's success signal.
|
|
|
|
## Done when
|
|
|
|
1. A user changes their password with the AD password policy shown first, other sessions end, and a confirmation e-mail arrives.
|
|
2. A user edits first name, last name, display name, telephone and mobile, and the values appear in AD.
|
|
3. An e-mail change applies only after the current password and a confirmation from the new address, and the old address receives a 24-hour undo link whose use ends sessions and notifies the Admin.
|
|
4. A user uploads a JPEG, PNG, HEIC or WebP picture up to 10 MB, crops it, sees Pending until the sync task has processed it, and can remove it.
|
|
5. Injection strings and attempts on another user's data change nothing, and every action leaves an audit entry.
|
|
|
|
## Boundaries
|
|
|
|
The password, profile, e-mail and picture features and the share adapter. Not announcements or Admin pages, and no change to the PowerShell scripts. Touch point owned here: the picture file share and sync task.
|
|
|
|
## References
|
|
|
|
- parent — _bmad-output/initiative-ping-mee-portal/initiative-ping-mee-portal.md, section Requirements
|
|
- spec — _bmad-output/specs/spec-ping-mee-self-service-platform/SPEC.md, CAP-2, CAP-3, CAP-4
|
|
- architecture — ARCHITECTURE-SPINE.md, AD-2, AD-3, AD-4, AD-8, AD-9, AD-10
|
|
- design — DESIGN.md and EXPERIENCE.md; mock-ups key-password.html and key-picture-pending.html
|
|
- constraint — SPEC.md, section Constraints
|
|
|
|
## Notes
|
|
|
|
- Waits on epic-platform-and-sign-in because: it needs sign-in, sessions, the directory adapter, throttling, the audit service and the mail outbox.
|
|
- Sliced 2026-10-18 into `tickets.toml`: password change, profile edit, e-mail change, picture share test environment (a person), picture backend, picture screens, refactor sweep. Checkpoints carried over from the spec: plan review on entries 1 and 5, a pause after entry 1.
|