# GET /v2/admission/internal_documents

Interne Angebotsdokumente im Leiterkontext lesen

Prüft den Leiter-/Adminzugang auf filter.date und fragt danach nicht gelöschte Dateien des Kontos über den allgemeinen Dateihandler ab. Die Terminprüfung beschränkt die Dateiauswahl aktuell nicht automatisch auf das Angebot oder interne Dokumente. Für genau dessen interne Unterlagen zusätzlich explizite property/value-Filter auf resource_type=offer, resource_id mit der Angebots-ID und filetype=internalOfferFile senden. Custom-Exportdateien sind ausgeschlossen.

- Operation-ID: get_v2_admission_internal_documents
- Dokumentation: /docs/api/v2/operations/get-v2-admission-internal-documents-a4502123b82b/
- OpenAPI-Version: 3.2.1
- Vollständige Spezifikation: /docs/api/v2/openapi.json
- Dokumentationsstatus: reviewed
- Ändert Zustand: nein, gemäss Annotation
- Für Automation freigegeben: nein

## Server

Serverwerte stammen unverändert aus der Datei. Eine lokale Entwicklungsadresse ist keine bestätigte Produktionsadresse. `API_ORIGIN` muss auf die passende Instanz gesetzt werden.

```json
[
  {
    "url": "https://app2.edoobox.com",
    "description": "edoobox API"
  }
]
```

## Authentifizierung

Eine der folgenden Alternativen genügt (ODER). Innerhalb einer Alternative müssen alle Verfahren gemeinsam erfüllt sein (UND).

1. **bearerAuth** (HTTP bearer) — Existing edoobox v2 access token. Never substitute API key/secret headers. **UND** **accountContext** (header: edid) — Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.
2. **sessionCookie** (cookie: _edlogin) — Existing browser login session, with the same permission checks as Bearer authentication. **UND** **accountContext** (header: edid) — Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.

### Wirksame Security Requirements und vollständige Verfahren

```json
{
  "security": [
    {
      "bearerAuth": [],
      "accountContext": []
    },
    {
      "sessionCookie": [],
      "accountContext": []
    }
  ],
  "securitySchemes": {
    "bearerAuth": {
      "type": "http",
      "scheme": "bearer",
      "bearerFormat": "JWT",
      "description": "Existing edoobox v2 access token. Never substitute API key/secret headers."
    },
    "accountContext": {
      "type": "apiKey",
      "in": "header",
      "name": "edid",
      "description": "Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account."
    },
    "sessionCookie": {
      "type": "apiKey",
      "in": "cookie",
      "name": "_edlogin",
      "description": "Existing browser login session, with the same permission checks as Bearer authentication."
    }
  }
}
```

## Parameter

| Name | Ort | Pflicht | Beschreibung |
| --- | --- | --- | --- |
| fields | query | nein | JSON-encoded fields value consumed by RequestAPIData / API_DATA; specific actions may ignore it. |
| filter | query | ja | date ist für die Terminprüfung erforderlich. Für die gewünschte Dateiauswahl zusätzliche explizite Ressourcen-/Dateitypfilter setzen. |
| limit | query | nein | JSON-encoded limit value consumed by RequestAPIData / API_DATA; specific actions may ignore it. |
| order | query | nein | JSON-encoded order value consumed by RequestAPIData / API_DATA; specific actions may ignore it. |
| response_type | query | nein | Controls generic collection representation; default is an ID-keyed object. |
| language | header | nein | Account language code, where the resource supports setLanguage(). |
| X-Edoobox-If-Revision | header | nein | Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review. |

### Vollständige wirksame Parameterdefinitionen

```json
[
  {
    "name": "fields",
    "in": "query",
    "required": false,
    "description": "JSON-encoded fields value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
    "content": {
      "application/json": {
        "schema": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "examples": [
            [
              "id"
            ]
          ]
        },
        "example": [
          "id"
        ]
      }
    }
  },
  {
    "name": "filter",
    "in": "query",
    "required": true,
    "description": "date ist für die Terminprüfung erforderlich. Für die gewünschte Dateiauswahl zusätzliche explizite Ressourcen-/Dateitypfilter setzen.",
    "content": {
      "application/json": {
        "schema": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "property": {
                "type": "string"
              },
              "expression": {
                "type": "string"
              },
              "value": {}
            },
            "additionalProperties": true,
            "required": [
              "property",
              "value"
            ]
          },
          "allOf": [
            {
              "contains": {
                "type": "object",
                "properties": {
                  "property": {
                    "const": "date"
                  },
                  "value": {
                    "type": "string",
                    "pattern": "^date_[a-f0-9]{12}_-?[0-9]+$",
                    "examples": [
                      "date_012345abcdef_123456"
                    ]
                  }
                },
                "additionalProperties": true,
                "required": [
                  "property",
                  "value"
                ]
              }
            }
          ]
        },
        "example": [
          {
            "property": "date",
            "value": "date_012345abcdef_123456"
          },
          {
            "property": "resource_type",
            "value": "offer"
          },
          {
            "property": "resource_id",
            "value": "offer_012345abcdef_123456"
          },
          {
            "property": "filetype",
            "value": "internalOfferFile"
          }
        ]
      }
    }
  },
  {
    "name": "limit",
    "in": "query",
    "required": false,
    "description": "JSON-encoded limit value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "properties": {
            "start": {
              "type": "integer",
              "minimum": 0,
              "default": 0
            },
            "reply": {
              "type": "integer",
              "maximum": 2000,
              "default": 100
            }
          },
          "examples": [
            {
              "start": 0,
              "reply": 25
            }
          ]
        },
        "example": {
          "start": 0,
          "reply": 25
        }
      }
    }
  },
  {
    "name": "order",
    "in": "query",
    "required": false,
    "description": "JSON-encoded order value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
    "content": {
      "application/json": {
        "schema": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "property": {
                "type": "string"
              },
              "value": {
                "type": "string",
                "enum": [
                  "ASC",
                  "DESC"
                ]
              }
            },
            "additionalProperties": true
          },
          "examples": [
            [
              {
                "property": "id",
                "value": "ASC"
              }
            ]
          ]
        },
        "example": [
          {
            "property": "id",
            "value": "ASC"
          }
        ]
      }
    }
  },
  {
    "name": "response_type",
    "in": "query",
    "required": false,
    "schema": {
      "type": "string",
      "enum": [
        "array",
        "object"
      ],
      "examples": [
        "array"
      ]
    },
    "description": "Controls generic collection representation; default is an ID-keyed object."
  },
  {
    "name": "language",
    "in": "header",
    "required": false,
    "description": "Account language code, where the resource supports setLanguage().",
    "schema": {
      "type": "string",
      "examples": [
        "de"
      ]
    }
  },
  {
    "name": "X-Edoobox-If-Revision",
    "in": "header",
    "required": false,
    "schema": {
      "type": "string",
      "pattern": "^[a-f0-9]{32}$",
      "examples": [
        "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
      ]
    },
    "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review."
  }
]
```

## Anfrage

Kein Request Body deklariert.

## Antworten

HTTP-Status und Antwortinhalt gemeinsam auswerten. Die folgenden Beschreibungen und Schemata sind die Angaben der Quelldatei.

```json
{
  "200": {
    "description": "data ist standardmässig eine nach files-ID indizierte Sammlung; response_type=array liefert eine Liste. Eine leere Sammlung kann [] sein.",
    "content": {
      "application/json": {
        "example": {
          "success": true,
          "error": false,
          "data": {
            "files_012345abcdef_123456": {
              "id": "files_012345abcdef_123456",
              "filename": "Unterlagen.pdf",
              "description": {
                "de": "Kursunterlagen"
              },
              "filetype": "internalOfferFile",
              "resource_type": "offer",
              "resource_id": "offer_012345abcdef_123456",
              "last_change": "2026-10-22T10:00:00+02:00"
            }
          }
        },
        "schema": {
          "type": "object",
          "properties": {
            "success": {
              "type": "boolean"
            },
            "error": {
              "type": [
                "boolean",
                "string"
              ]
            },
            "error_code": {
              "type": "string"
            },
            "data": {
              "anyOf": [
                {
                  "type": "array",
                  "items": {
                    "type": "object",
                    "properties": {
                      "id": {
                        "type": "string",
                        "pattern": "^files_[a-f0-9]{12}_-?[0-9]+$",
                        "examples": [
                          "files_012345abcdef_123456"
                        ],
                        "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                      },
                      "filename": {
                        "type": "string"
                      },
                      "description": {
                        "anyOf": [
                          {
                            "type": "object",
                            "properties": {},
                            "additionalProperties": {
                              "type": "string"
                            }
                          },
                          {
                            "type": "array",
                            "items": {}
                          }
                        ]
                      },
                      "filetype": {
                        "type": "string"
                      },
                      "resource_type": {
                        "type": "string"
                      },
                      "resource_id": {
                        "anyOf": [
                          {
                            "type": "string",
                            "pattern": "^user_[a-f0-9]{12}_-?[0-9]+$",
                            "examples": [
                              "user_012345abcdef_123456"
                            ],
                            "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                          },
                          {
                            "type": "string",
                            "pattern": "^offer_[a-f0-9]{12}_-?[0-9]+$",
                            "examples": [
                              "offer_012345abcdef_123456"
                            ],
                            "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                          },
                          {
                            "type": "string",
                            "pattern": "^admin_[a-f0-9]{12}_-?[0-9]+$",
                            "examples": [
                              "admin_012345abcdef_123456"
                            ],
                            "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                          },
                          {
                            "const": false
                          }
                        ]
                      },
                      "last_change": {
                        "type": "string",
                        "format": "date-time"
                      }
                    },
                    "additionalProperties": true
                  }
                },
                {
                  "type": "object",
                  "additionalProperties": {
                    "type": "object",
                    "properties": {
                      "id": {
                        "type": "string",
                        "pattern": "^files_[a-f0-9]{12}_-?[0-9]+$",
                        "examples": [
                          "files_012345abcdef_123456"
                        ],
                        "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                      },
                      "filename": {
                        "type": "string"
                      },
                      "description": {
                        "anyOf": [
                          {
                            "type": "object",
                            "properties": {},
                            "additionalProperties": {
                              "type": "string"
                            }
                          },
                          {
                            "type": "array",
                            "items": {}
                          }
                        ]
                      },
                      "filetype": {
                        "type": "string"
                      },
                      "resource_type": {
                        "type": "string"
                      },
                      "resource_id": {
                        "anyOf": [
                          {
                            "type": "string",
                            "pattern": "^user_[a-f0-9]{12}_-?[0-9]+$",
                            "examples": [
                              "user_012345abcdef_123456"
                            ],
                            "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                          },
                          {
                            "type": "string",
                            "pattern": "^offer_[a-f0-9]{12}_-?[0-9]+$",
                            "examples": [
                              "offer_012345abcdef_123456"
                            ],
                            "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                          },
                          {
                            "type": "string",
                            "pattern": "^admin_[a-f0-9]{12}_-?[0-9]+$",
                            "examples": [
                              "admin_012345abcdef_123456"
                            ],
                            "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                          },
                          {
                            "const": false
                          }
                        ]
                      },
                      "last_change": {
                        "type": "string",
                        "format": "date-time"
                      }
                    },
                    "additionalProperties": true
                  }
                }
              ]
            },
            "type": {
              "type": "string"
            }
          },
          "additionalProperties": true
        }
      }
    },
    "headers": {
      "X-Edoobox-Revision": {
        "schema": {
          "type": "string",
          "pattern": "^[a-f0-9]{32}$"
        },
        "description": "Rotated account revision supplied for the next action in one reviewed sequence."
      }
    }
  },
  "400": {
    "description": "Invalid request.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED40006"
        }
      }
    }
  },
  "401": {
    "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED40103"
        }
      }
    }
  },
  "402": {
    "description": "Missing/invalid action data or subscription/operation restriction.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED80100"
        }
      }
    }
  },
  "403": {
    "description": "Permission denied. Browser CORS rejection may have an empty body.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED40340"
        }
      }
    }
  },
  "404": {
    "description": "Unknown resource/action or unsupported method.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED80019"
        }
      }
    }
  },
  "409": {
    "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.",
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "additionalProperties": true
        },
        "example": {
          "error": "ED40901",
          "error_code": "mutation_revision_conflict"
        }
      }
    }
  },
  "422": {
    "description": "Validation failed.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED80020"
        }
      }
    }
  },
  "429": {
    "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED42902"
        }
      }
    },
    "headers": {
      "Retry-After": {
        "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.",
        "schema": {
          "type": "string",
          "examples": [
            "30"
          ]
        }
      }
    }
  },
  "502": {
    "description": "Server-side operation failed.",
    "content": {
      "application/json": {
        "example": {
          "success": false,
          "error": "ED50201"
        }
      }
    }
  },
  "503": {
    "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.",
    "headers": {
      "Retry-After": {
        "schema": {
          "type": "integer",
          "const": 1
        }
      }
    },
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "additionalProperties": true
        },
        "example": {
          "error": "ED50301",
          "error_code": "mutation_revision_busy"
        }
      }
    }
  }
}
```

## Aufrufbeispiele

Anpassen vor dem Ausführen. Platzhalter und veröffentlichte Beispiele sind synthetisch. Die Beispiele senden hier keine Anfrage; sie ergänzen keine unbekannten Pflichtfelder.

### cURL

```sh
# Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich.
# filter: komplexen Wert vorab gemäss content/style/explode serialisieren; das Beispiel verwendet einen vorbereiteten Wert.
: "${API_ORIGIN:?API_ORIGIN setzen}"
: "${AUTH_BEARERAUTH:?AUTH_BEARERAUTH setzen}"
: "${AUTH_ACCOUNTCONTEXT:?AUTH_ACCOUNTCONTEXT setzen}"
: "${QUERY_FILTER:?QUERY_FILTER setzen}"
curl --request 'GET' \
  --url "${API_ORIGIN%/}"'/v2/admission/internal_documents' \
  --url-query 'filter='"${QUERY_FILTER}" \
  --header 'Authorization: Bearer '"${AUTH_BEARERAUTH}" \
  --header 'edid: '"${AUTH_ACCOUNTCONTEXT}"
```

### JavaScript (Node.js)

```javascript
// Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich.
// filter: komplexen Wert vorab gemäss content/style/explode serialisieren; das Beispiel verwendet einen vorbereiteten Wert.
const required = (name) => {
  const value = process.env[name];
  if (!value) throw new Error(`Set ${name}`);
  return value;
};
let path = "/v2/admission/internal_documents";
const origin = required('API_ORIGIN');
const url = new URL((origin.endsWith('/') ? origin.slice(0, -1) : origin) + path);
url.searchParams.append("filter", required("QUERY_FILTER"));
const headers = {};
headers["Authorization"] = "Bearer " + required("AUTH_BEARERAUTH");
headers["edid"] = "" + required("AUTH_ACCOUNTCONTEXT");
const response = await fetch(url, { method: "GET", headers, redirect: 'manual' });
const text = await response.text();
console.log(response.status, text);
// HTTP-Status und dokumentierte error/success-Felder gemeinsam prüfen.
```

### Python

```python
# Zeigt Authentifizierungsalternative 1; alle Verfahren dieser Alternative sind gemeinsam erforderlich.
# filter: komplexen Wert vorab gemäss content/style/explode serialisieren; das Beispiel verwendet einen vorbereiteten Wert.
import os
import urllib.parse
import urllib.request
import urllib.error

path = "/v2/admission/internal_documents"
url = os.environ["API_ORIGIN"].rstrip("/") + path
url += "?" + urllib.parse.urlencode([("filter", os.environ["QUERY_FILTER"])])
headers = {}
headers["Authorization"] = "Bearer " + os.environ["AUTH_BEARERAUTH"]
headers["edid"] = "" + os.environ["AUTH_ACCOUNTCONTEXT"]

# Redirects nicht automatisch verfolgen.
class NoRedirect(urllib.request.HTTPRedirectHandler):
    def redirect_request(self, req, fp, code, msg, headers, newurl):
        return None
request = urllib.request.Request(url, headers=headers, method="GET")
try:
    response = urllib.request.build_opener(NoRedirect).open(request, timeout=30)
except urllib.error.HTTPError as error:
    response = error
print(response.status, response.read().decode("utf-8", errors="replace"))
# HTTP-Status und dokumentierte error/success-Felder gemeinsam prüfen.
```

## Vollständige Operationsdefinition und edoobox-Hinweise

Alle Originalfelder einschliesslich `x-edoobox-*`, requestBody und responses bleiben erhalten. Teilweise dokumentierte Schemata sind kein vollständiger Validierungsvertrag.

```json
{
  "operationId": "get_v2_admission_internal_documents",
  "summary": "Interne Angebotsdokumente im Leiterkontext lesen",
  "description": "Prüft den Leiter-/Adminzugang auf filter.date und fragt danach nicht gelöschte Dateien des Kontos über den allgemeinen Dateihandler ab. Die Terminprüfung beschränkt die Dateiauswahl aktuell nicht automatisch auf das Angebot oder interne Dokumente. Für genau dessen interne Unterlagen zusätzlich explizite property/value-Filter auf resource_type=offer, resource_id mit der Angebots-ID und filetype=internalOfferFile senden. Custom-Exportdateien sind ausgeschlossen.",
  "tags": [
    "admission"
  ],
  "security": [
    {
      "bearerAuth": [],
      "accountContext": []
    },
    {
      "sessionCookie": [],
      "accountContext": []
    }
  ],
  "parameters": [
    {
      "name": "fields",
      "in": "query",
      "required": false,
      "description": "JSON-encoded fields value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
      "content": {
        "application/json": {
          "schema": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "examples": [
              [
                "id"
              ]
            ]
          },
          "example": [
            "id"
          ]
        }
      }
    },
    {
      "name": "filter",
      "in": "query",
      "required": true,
      "description": "date ist für die Terminprüfung erforderlich. Für die gewünschte Dateiauswahl zusätzliche explizite Ressourcen-/Dateitypfilter setzen.",
      "content": {
        "application/json": {
          "schema": {
            "type": "array",
            "items": {
              "type": "object",
              "properties": {
                "property": {
                  "type": "string"
                },
                "expression": {
                  "type": "string"
                },
                "value": {}
              },
              "additionalProperties": true,
              "required": [
                "property",
                "value"
              ]
            },
            "allOf": [
              {
                "contains": {
                  "type": "object",
                  "properties": {
                    "property": {
                      "const": "date"
                    },
                    "value": {
                      "type": "string",
                      "pattern": "^date_[a-f0-9]{12}_-?[0-9]+$",
                      "examples": [
                        "date_012345abcdef_123456"
                      ]
                    }
                  },
                  "additionalProperties": true,
                  "required": [
                    "property",
                    "value"
                  ]
                }
              }
            ]
          },
          "example": [
            {
              "property": "date",
              "value": "date_012345abcdef_123456"
            },
            {
              "property": "resource_type",
              "value": "offer"
            },
            {
              "property": "resource_id",
              "value": "offer_012345abcdef_123456"
            },
            {
              "property": "filetype",
              "value": "internalOfferFile"
            }
          ]
        }
      }
    },
    {
      "name": "limit",
      "in": "query",
      "required": false,
      "description": "JSON-encoded limit value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "properties": {
              "start": {
                "type": "integer",
                "minimum": 0,
                "default": 0
              },
              "reply": {
                "type": "integer",
                "maximum": 2000,
                "default": 100
              }
            },
            "examples": [
              {
                "start": 0,
                "reply": 25
              }
            ]
          },
          "example": {
            "start": 0,
            "reply": 25
          }
        }
      }
    },
    {
      "name": "order",
      "in": "query",
      "required": false,
      "description": "JSON-encoded order value consumed by RequestAPIData / API_DATA; specific actions may ignore it.",
      "content": {
        "application/json": {
          "schema": {
            "type": "array",
            "items": {
              "type": "object",
              "properties": {
                "property": {
                  "type": "string"
                },
                "value": {
                  "type": "string",
                  "enum": [
                    "ASC",
                    "DESC"
                  ]
                }
              },
              "additionalProperties": true
            },
            "examples": [
              [
                {
                  "property": "id",
                  "value": "ASC"
                }
              ]
            ]
          },
          "example": [
            {
              "property": "id",
              "value": "ASC"
            }
          ]
        }
      }
    },
    {
      "name": "response_type",
      "in": "query",
      "required": false,
      "schema": {
        "type": "string",
        "enum": [
          "array",
          "object"
        ],
        "examples": [
          "array"
        ]
      },
      "description": "Controls generic collection representation; default is an ID-keyed object."
    },
    {
      "name": "language",
      "in": "header",
      "required": false,
      "description": "Account language code, where the resource supports setLanguage().",
      "schema": {
        "type": "string",
        "examples": [
          "de"
        ]
      }
    },
    {
      "name": "X-Edoobox-If-Revision",
      "in": "header",
      "required": false,
      "schema": {
        "type": "string",
        "pattern": "^[a-f0-9]{32}$",
        "examples": [
          "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        ]
      },
      "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review."
    }
  ],
  "responses": {
    "200": {
      "description": "data ist standardmässig eine nach files-ID indizierte Sammlung; response_type=array liefert eine Liste. Eine leere Sammlung kann [] sein.",
      "content": {
        "application/json": {
          "example": {
            "success": true,
            "error": false,
            "data": {
              "files_012345abcdef_123456": {
                "id": "files_012345abcdef_123456",
                "filename": "Unterlagen.pdf",
                "description": {
                  "de": "Kursunterlagen"
                },
                "filetype": "internalOfferFile",
                "resource_type": "offer",
                "resource_id": "offer_012345abcdef_123456",
                "last_change": "2026-10-22T10:00:00+02:00"
              }
            }
          },
          "schema": {
            "type": "object",
            "properties": {
              "success": {
                "type": "boolean"
              },
              "error": {
                "type": [
                  "boolean",
                  "string"
                ]
              },
              "error_code": {
                "type": "string"
              },
              "data": {
                "anyOf": [
                  {
                    "type": "array",
                    "items": {
                      "type": "object",
                      "properties": {
                        "id": {
                          "type": "string",
                          "pattern": "^files_[a-f0-9]{12}_-?[0-9]+$",
                          "examples": [
                            "files_012345abcdef_123456"
                          ],
                          "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                        },
                        "filename": {
                          "type": "string"
                        },
                        "description": {
                          "anyOf": [
                            {
                              "type": "object",
                              "properties": {},
                              "additionalProperties": {
                                "type": "string"
                              }
                            },
                            {
                              "type": "array",
                              "items": {}
                            }
                          ]
                        },
                        "filetype": {
                          "type": "string"
                        },
                        "resource_type": {
                          "type": "string"
                        },
                        "resource_id": {
                          "anyOf": [
                            {
                              "type": "string",
                              "pattern": "^user_[a-f0-9]{12}_-?[0-9]+$",
                              "examples": [
                                "user_012345abcdef_123456"
                              ],
                              "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                            },
                            {
                              "type": "string",
                              "pattern": "^offer_[a-f0-9]{12}_-?[0-9]+$",
                              "examples": [
                                "offer_012345abcdef_123456"
                              ],
                              "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                            },
                            {
                              "type": "string",
                              "pattern": "^admin_[a-f0-9]{12}_-?[0-9]+$",
                              "examples": [
                                "admin_012345abcdef_123456"
                              ],
                              "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                            },
                            {
                              "const": false
                            }
                          ]
                        },
                        "last_change": {
                          "type": "string",
                          "format": "date-time"
                        }
                      },
                      "additionalProperties": true
                    }
                  },
                  {
                    "type": "object",
                    "additionalProperties": {
                      "type": "object",
                      "properties": {
                        "id": {
                          "type": "string",
                          "pattern": "^files_[a-f0-9]{12}_-?[0-9]+$",
                          "examples": [
                            "files_012345abcdef_123456"
                          ],
                          "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                        },
                        "filename": {
                          "type": "string"
                        },
                        "description": {
                          "anyOf": [
                            {
                              "type": "object",
                              "properties": {},
                              "additionalProperties": {
                                "type": "string"
                              }
                            },
                            {
                              "type": "array",
                              "items": {}
                            }
                          ]
                        },
                        "filetype": {
                          "type": "string"
                        },
                        "resource_type": {
                          "type": "string"
                        },
                        "resource_id": {
                          "anyOf": [
                            {
                              "type": "string",
                              "pattern": "^user_[a-f0-9]{12}_-?[0-9]+$",
                              "examples": [
                                "user_012345abcdef_123456"
                              ],
                              "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                            },
                            {
                              "type": "string",
                              "pattern": "^offer_[a-f0-9]{12}_-?[0-9]+$",
                              "examples": [
                                "offer_012345abcdef_123456"
                              ],
                              "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                            },
                            {
                              "type": "string",
                              "pattern": "^admin_[a-f0-9]{12}_-?[0-9]+$",
                              "examples": [
                                "admin_012345abcdef_123456"
                              ],
                              "description": "Öffentliche v2-ID aus dem ausgewählten Konto."
                            },
                            {
                              "const": false
                            }
                          ]
                        },
                        "last_change": {
                          "type": "string",
                          "format": "date-time"
                        }
                      },
                      "additionalProperties": true
                    }
                  }
                ]
              },
              "type": {
                "type": "string"
              }
            },
            "additionalProperties": true
          }
        }
      },
      "headers": {
        "X-Edoobox-Revision": {
          "schema": {
            "type": "string",
            "pattern": "^[a-f0-9]{32}$"
          },
          "description": "Rotated account revision supplied for the next action in one reviewed sequence."
        }
      }
    },
    "400": {
      "description": "Invalid request.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40006"
          }
        }
      }
    },
    "401": {
      "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40103"
          }
        }
      }
    },
    "402": {
      "description": "Missing/invalid action data or subscription/operation restriction.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80100"
          }
        }
      }
    },
    "403": {
      "description": "Permission denied. Browser CORS rejection may have an empty body.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40340"
          }
        }
      }
    },
    "404": {
      "description": "Unknown resource/action or unsupported method.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80019"
          }
        }
      }
    },
    "409": {
      "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.",
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED40901",
            "error_code": "mutation_revision_conflict"
          }
        }
      }
    },
    "422": {
      "description": "Validation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80020"
          }
        }
      }
    },
    "429": {
      "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED42902"
          }
        }
      },
      "headers": {
        "Retry-After": {
          "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.",
          "schema": {
            "type": "string",
            "examples": [
              "30"
            ]
          }
        }
      }
    },
    "502": {
      "description": "Server-side operation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED50201"
          }
        }
      }
    },
    "503": {
      "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.",
      "headers": {
        "Retry-After": {
          "schema": {
            "type": "integer",
            "const": 1
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED50301",
            "error_code": "mutation_revision_busy"
          }
        }
      }
    }
  },
  "x-edoobox-mutates-state": false,
  "x-edoobox-runtimeMutationGuard": true,
  "x-edoobox-get-effect": "read",
  "x-edoobox-documentationReview": {
    "file": "docs/openapi/operation-contracts/02-booking-users.json",
    "notes": [
      "Quellseitig werden resource_type/resource_id/filetype als assoziative filter-Schlüssel ergänzt. API_DATA verarbeitet nur property/value-Einträge; diese vorbereiteten Schlüssel begrenzen die Liste daher nicht. Die Dokumentation behauptet keine zusätzliche Angebotsberechtigung für gelistete Dateien."
    ]
  },
  "x-edoobox-source": {
    "file": "application/models/v2/Admission.php",
    "method": "getAdmission",
    "line": 136,
    "branch": {
      "file": "application/models/v2/Admission.php",
      "line": 156
    }
  },
  "x-edoobox-documentationStatus": "reviewed",
  "x-edoobox-readOnly": true,
  "x-edoobox-safeForAutomation": false,
  "x-edoobox-permission": {
    "resource": "admission",
    "short": "adms",
    "checkedByDispatcher": true,
    "levels": [
      1,
      3,
      4
    ],
    "description": "Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope."
  }
}
```
