Ebbe BaßandClaude Sonnet 5.5
24de5878ed
Includes the BMAD install config, the initiative ticket tree, the portal context-resources scripts, and the .gitignore change that tracks BMAD files (generated _bmad/render/ is ignored). Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Sk72AxLwQnYttF6VFSxQLt
2.2 KiB
2.2 KiB
tracker_id, key, type, title, parent, covers, after, assignee, risk
| tracker_id | key | type | title | parent | covers | after | assignee | risk | |||
|---|---|---|---|---|---|---|---|---|---|---|---|
| epic | A user manages their own account | initiative-ping-mee-portal |
|
high |
A user manages their own account
Description
Users change their own password, profile details, e-mail address and profile picture in the live portal. This is the main reason the portal exists: it removes the admin from known-password changes and routine profile edits.
Outcome
Family and friends change their own password, details and picture without the admin; the first part of the spec's success signal.
Done when
- A user changes their password with the AD password policy shown first, other sessions end, and a confirmation e-mail arrives.
- A user edits first name, last name, display name, telephone and mobile, and the values appear in AD.
- An e-mail change applies only after the current password and a confirmation from the new address, and the old address receives a 24-hour undo link whose use ends sessions and notifies the Admin.
- A user uploads a JPEG, PNG, HEIC or WebP picture up to 10 MB, crops it, sees Pending until the sync task has processed it, and can remove it.
- Injection strings and attempts on another user's data change nothing, and every action leaves an audit entry.
Boundaries
The password, profile, e-mail and picture features and the share adapter. Not announcements or Admin pages, and no change to the PowerShell scripts. Touch point owned here: the picture file share and sync task.
References
- parent — _bmad-output/initiative-ping-mee-portal/initiative-ping-mee-portal.md, section Requirements
- spec — _bmad-output/specs/spec-ping-mee-self-service-platform/SPEC.md, CAP-2, CAP-3, CAP-4
- architecture — ARCHITECTURE-SPINE.md, AD-2, AD-3, AD-4, AD-8, AD-9, AD-10
- design — DESIGN.md and EXPERIENCE.md; mock-ups key-password.html and key-picture-pending.html
- constraint — SPEC.md, section Constraints
Notes
- Waits on epic-platform-and-sign-in because: it needs sign-in, sessions, the directory adapter, throttling, the audit service and the mail outbox.
- Not yet sliced: this epic is broken into stories when it is selected.