1.0.0-rc.1 · Release Candidate1 min read
AutoCore User Administration
Source-verified user search, profiles, status changes, session controls, and privacy limits.
The user list is paginated at 20 rows and exposes identity fields, status, roles, and creation time. Detail responses include activity timing, listing/saved-search/report counts, dealer memberships, and sessions.
| Area | Source-verified boundary |
|---|---|
| List/view | marketplace.users.view plus controller-level user.manage. |
| Status change | marketplace.users.manage; status and optional reason are validated by the service. |
| Role assignment/revocation | marketplace.users.roles.manage; role changes are audited and super_admin handling is restricted. |
| Session revocation | marketplace.users.sessions.revoke; one-session and all-session actions are explicit. |
High-risk operation
Use the required permission, reason, confirmation, and post-action verification. UI visibility is not the authorization boundary.
Verification
Verify the route, permission, response state, audit outcome, and public effect before closing the task. Record unknown or configuration-dependent behavior as a limitation.