Polska firma — tworzymy w Polsce 🇵🇱

Użytkownicy i dostęp

Użytkownicy i grupy uprawnień — zarządzaj tym, kto co widzi i może robić.

Użytkownik

Endpoints

GET	/users/{id}	Collect single User
PATCH	/users/{id}	Update User
GET	/users/{id}/avatar	Read uploaded user profile picture
POST	/users/activation/{token}	User account activation
POST	/users/create	Create User only account
GET	/users/me	Collect currently authenticated User
POST	/users/me/avatar	Upload current user profile picture
POST	/users/me/avatar/source	Choose where the current user's avatar comes from
POST	/users/password-reset	First step of reseting user password
POST	/users/password-setup/{token}	Second step of reseting user password
POST	/users/register	Create User and Organization account

Pola schematu

Pole	Typ	Opis
id	integer
email*	string,null (email)
firstname*	string
lastname*	string
interestedInModules	arraynull
avatarUrl	stringnull	Setting an actual avatar un-suppresses, because holding both would be the impossible state (#4139): a picture to show and an instruction to show initials instead. Clearing it to `null` deliberately does NOT touch the flag — "no avatar" is exactly the state a suppressed user is in, so clearing must not silently cancel their choice.
avatarSuppressed	boolean	The user asked to be shown as initials, and means it across sign-ins (#4139).
hasUploadedAvatar	boolean	Serialized because it is the "shown when" condition for the "Revert to Google photo" control (front#3030). The alternative is the client re-deriving it from `avatarUrl` with its own copy of the prefix rule below — a second implementation of a server rule, in the one feature whose entire premise is that a control must not quietly mean something other than what it says.

Grupa uprawnień

Endpoints

GET	/permission-groups	Pobiera kolekcję zasobów PermissionGroup.
POST	/permission-groups	Tworzy zasób PermissionGroup.
GET	/permission-groups/{id}	Pobiera zasób PermissionGroup.
PATCH	/permission-groups/{id}	Aktualizuje zasób PermissionGroup.
DELETE	/permission-groups/{id}	Usuwa zasób PermissionGroup.

Pola schematu

Pole	Typ	Opis
id	integer
code	stringnull	Stable code for default seed groups; null for org-created custom groups.
name*	string
description	stringnull
roles	array	ROLE_* string values
employees	array
createdAt	string (date-time)
updatedAt	string (date-time)
deletedAt	string,null (date-time)
userCount	integer	Convenience for tests / migration. Number of currently-assigned employees, excluding soft-deleted ones (Doctrine SoftDeleteable filter handles this at query level when enabled).
deleted	boolean	Check if the entity has been soft deleted.