39 lines
1.8 KiB
Markdown
39 lines
1.8 KiB
Markdown
|
# pocketbase-native-data-access Specification
|
||
|
|
|
||
|
|
## Purpose
|
||
|
|
TBD - created by archiving change normalize-pocketbase-schema-docs. Update Purpose after archive.
|
||
|
|
## Requirements
|
||
|
|
### Requirement: PocketBase native company access SHALL expose a stable public create and query boundary
|
||
|
|
|
||
|
|
The system SHALL allow native PocketBase clients to create company records publicly and to query company records through standard PocketBase records APIs, while privileged mutations remain restricted to management users.
|
||
|
|
|
||
|
|
#### Scenario: Public client creates company record
|
||
|
|
|
||
|
|
- **WHEN** a client calls the native PocketBase create-record API for `tbl_company`
|
||
|
|
- **THEN** the request SHALL succeed without requiring a management token
|
||
|
|
|
||
|
|
#### Scenario: Public client queries company list
|
||
|
|
|
||
|
|
- **WHEN** a client calls the native PocketBase list-records API for `tbl_company`
|
||
|
|
- **THEN** the request SHALL return company records using standard PocketBase pagination parameters
|
||
|
|
|
||
|
|
#### Scenario: Management user updates company record
|
||
|
|
|
||
|
|
- **WHEN** a client attempts to update or delete `tbl_company`
|
||
|
|
- **THEN** PocketBase SHALL allow the operation only for management users or administrators
|
||
|
|
|
||
|
|
### Requirement: Public dictionary and document reads SHALL be supported through native PocketBase APIs
|
||
|
|
|
||
|
|
The system SHALL allow native PocketBase clients to read `tbl_system_dict` and `tbl_document` records without requiring application hooks tokens, while write operations remain restricted.
|
||
|
|
|
||
|
|
#### Scenario: Public client reads dictionary records
|
||
|
|
|
||
|
|
- **WHEN** a client calls the native PocketBase records API for `tbl_system_dict`
|
||
|
|
- **THEN** list and view operations SHALL be readable without authentication
|
||
|
|
|
||
|
|
#### Scenario: Public client reads document records
|
||
|
|
|
||
|
|
- **WHEN** a client calls the native PocketBase records API for `tbl_document`
|
||
|
|
- **THEN** list and view operations SHALL be readable without authentication
|
||
|
|
|