docs: MkDocs-Dokumentation fuer DSR, E-Mail-Templates, Banner Consent
All checks were successful
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / test-go-ai-compliance (push) Successful in 48s
CI / test-python-backend-compliance (push) Successful in 42s
CI / test-python-document-crawler (push) Successful in 24s
CI / test-python-dsms-gateway (push) Successful in 21s
All checks were successful
CI / go-lint (push) Has been skipped
CI / python-lint (push) Has been skipped
CI / nodejs-lint (push) Has been skipped
CI / test-go-ai-compliance (push) Successful in 48s
CI / test-python-backend-compliance (push) Successful in 42s
CI / test-python-document-crawler (push) Successful in 24s
CI / test-python-dsms-gateway (push) Successful in 21s
- Neue Seiten: dsr.md, email-templates.md, banner-consent.md - rechtliche-texte.md: User-Consents & Cookie-Kategorien (Migration 028) ergaenzt - mkdocs.yml: 3 neue Nav-Eintraege unter SDK Module Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -15,6 +15,8 @@ Alle vier Module sind vollstaendig backend-persistent und bieten CRUD-Operatione
|
||||
| [Rechtliche Vorlagen](#rechtliche-vorlagen-consent) | `/sdk/consent` | CP-DOC (REQUIRED) | ✅ Migration 007 | 100% |
|
||||
| [Cookie Banner](#cookie-banner) | `/sdk/cookie-banner` | CP-COOK (REQUIRED) | ✅ Migration 008 | 100% |
|
||||
| [Document Workflow](#document-workflow) | `/sdk/workflow` | CP-WRKF (REQUIRED) | ✅ Migration 007 | 100% |
|
||||
| [User-Consents & Audit](#user-consents--audit) | `/sdk/consent` | — | ✅ Migration 028 | 100% |
|
||||
| [Cookie-Kategorien](#cookie-kategorien) | `/sdk/cookie-banner` | — | ✅ Migration 028 | 100% |
|
||||
|
||||
---
|
||||
|
||||
@@ -312,6 +314,83 @@ Alle Aenderungen an Einwilligungen werden automatisch in der Tabelle
|
||||
|
||||
---
|
||||
|
||||
## User-Consents & Audit
|
||||
|
||||
**Erweiterung der Legal Documents** (Migration 028) | **Rechtsgrundlage:** Art. 7 DSGVO
|
||||
|
||||
Diese Endpoints erweitern die bestehende Dokumentenverwaltung um **End-User-Consent-Tracking**:
|
||||
Benutzer koennen ihre Zustimmung zu rechtlichen Dokumenten erteilen und widerrufen.
|
||||
|
||||
### API-Endpoints
|
||||
|
||||
| Methode | Pfad | Beschreibung |
|
||||
|---------|------|--------------|
|
||||
| `GET` | `/api/compliance/legal-documents/public` | Aktive Dokumente (fuer Endbenutzer) |
|
||||
| `GET` | `/api/compliance/legal-documents/public/{type}/latest` | Neueste publizierte Version |
|
||||
| `POST` | `/api/compliance/legal-documents/consents` | Consent erfassen (user_id, document_version_id) |
|
||||
| `GET` | `/api/compliance/legal-documents/consents/my` | Eigene Consents (Filter: X-User-ID) |
|
||||
| `GET` | `/api/compliance/legal-documents/consents/check/{type}` | Consent-Status pruefen |
|
||||
| `DELETE` | `/api/compliance/legal-documents/consents/{id}` | Consent widerrufen (Art. 7 Abs. 3) |
|
||||
| `GET` | `/api/compliance/legal-documents/stats/consents` | Consent-Statistiken |
|
||||
| `GET` | `/api/compliance/legal-documents/audit-log` | Audit-Trail (paginiert) |
|
||||
|
||||
### DB-Tabellen (Migration 028)
|
||||
|
||||
| Tabelle | Beschreibung |
|
||||
|---------|--------------|
|
||||
| `compliance_user_consents` | End-User Consent-Records (user_id, document_version_id, ip, user_agent) |
|
||||
| `compliance_consent_audit_log` | Audit-Trail (consent_given, consent_withdrawn, etc.) |
|
||||
|
||||
### Datenmodell (User-Consent)
|
||||
|
||||
```json
|
||||
{
|
||||
"id": "uuid",
|
||||
"tenant_id": "uuid",
|
||||
"user_id": "nutzer@beispiel.de",
|
||||
"document_version_id": "uuid",
|
||||
"consented": true,
|
||||
"ip_address": "192.168.1.1",
|
||||
"user_agent": "Mozilla/5.0...",
|
||||
"consented_at": "2026-03-05T10:00:00Z",
|
||||
"withdrawn_at": null
|
||||
}
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Cookie-Kategorien
|
||||
|
||||
**Erweiterung der Legal Documents** (Migration 028) | **Rechtsgrundlage:** TTDSG § 25
|
||||
|
||||
Verwaltung zweisprachiger Cookie-Kategorien (de/en) mit Pflicht-Flag und Sortierung.
|
||||
|
||||
### API-Endpoints
|
||||
|
||||
| Methode | Pfad | Beschreibung |
|
||||
|---------|------|--------------|
|
||||
| `GET` | `/api/compliance/legal-documents/cookie-categories` | Alle Kategorien |
|
||||
| `POST` | `/api/compliance/legal-documents/cookie-categories` | Kategorie erstellen |
|
||||
| `PUT` | `/api/compliance/legal-documents/cookie-categories/{id}` | Kategorie aktualisieren |
|
||||
| `DELETE` | `/api/compliance/legal-documents/cookie-categories/{id}` | Kategorie loeschen |
|
||||
|
||||
### DB-Tabelle (Migration 028)
|
||||
|
||||
| Tabelle | Beschreibung |
|
||||
|---------|--------------|
|
||||
| `compliance_cookie_categories` | Cookie-Kategorien (name_de, name_en, is_required, sort_order) |
|
||||
|
||||
### Default-Kategorien
|
||||
|
||||
| Key | Deutsch | Englisch | Pflicht |
|
||||
|-----|---------|----------|---------|
|
||||
| `necessary` | Notwendig | Necessary | ✅ |
|
||||
| `functional` | Funktional | Functional | — |
|
||||
| `analytics` | Analyse | Analytics | — |
|
||||
| `marketing` | Marketing | Marketing | — |
|
||||
|
||||
---
|
||||
|
||||
## Datenfluss Paket 4
|
||||
|
||||
```mermaid
|
||||
|
||||
Reference in New Issue
Block a user