Zum Inhalt
edoobox Docs
Kostenlos testen 7 Tage unverbindlich testen
Menü
Kostenlos testen 7 Tage unverbindlich testen
OpenAPI herunterladen
attendanceAPI-Referenz
PUT/v2/attendance/{id}

Vorhandenen Präsenzstatus ändern

Aktualisiert type eines bestehenden Präsenzdatensatzes und schreibt dabei einen Statusverlauf mit Bearbeiter. date und participant bleiben unveränderlich. Ohne Pfad-ID ist die öffentliche attendance-ID im obersten id-Feld erforderlich; last_change wird beim Statuswechsel serverseitig gesetzt.

Operation-ID put_v2_attendance_id

01

Vertrag & Verhalten

Dokumentationsstand
reviewed
Ändert Zustand
Ja
Als readOnly markiert
Nein
Für Automation markiert
Nein
02

Authentifizierung

Eine der folgenden Alternativen muss erfüllt sein (ODER). Innerhalb jeder Alternative werden alle angegebenen Schemas gemeinsam benötigt (UND).

Alternative 1

bearerAuthhttp · bearer

Existing edoobox v2 access token. Never substitute API key/secret headers.

Format: JWT

Security-Schema als JSON
{
  "type": "http",
  "scheme": "bearer",
  "bearerFormat": "JWT",
  "description": "Existing edoobox v2 access token. Never substitute API key/secret headers."
}
accountContextapiKey

Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.

header: edid

Security-Schema als JSON
{
  "type": "apiKey",
  "in": "header",
  "name": "edid",
  "description": "Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account."
}

Alternative 2

sessionCookieapiKey

Existing browser login session, with the same permission checks as Bearer authentication.

cookie: _edlogin

Security-Schema als JSON
{
  "type": "apiKey",
  "in": "cookie",
  "name": "_edlogin",
  "description": "Existing browser login session, with the same permission checks as Bearer authentication."
}
accountContextapiKey

Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account.

header: edid

Security-Schema als JSON
{
  "type": "apiKey",
  "in": "header",
  "name": "edid",
  "description": "Selected login/account context from the JWT, not a database primary key. Required even for a JWT with one account."
}

Berechtigungen

Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope.

03

Parameter

Pfadparameter

iderforderlich

v2 object identifier in the selected account.

string

Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.

pattern
"^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$"
Schema-Beispiel
"attendance_012345abcdef_123456"
Vollständiges Schema als JSON
{
  "type": "string",
  "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
  "description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
  "examples": [
    "attendance_012345abcdef_123456"
  ]
}

Header

languageoptional

Account language code, where the resource supports setLanguage().

string
Schema-Beispiel
"de"
Vollständiges Schema als JSON
{
  "type": "string",
  "examples": [
    "de"
  ]
}
X-Edoobox-If-Revisionoptional

Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review.

string
pattern
"^[a-f0-9]{32}$"
Schema-Beispiel
"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
Vollständiges Schema als JSON
{
  "type": "string",
  "pattern": "^[a-f0-9]{32}$",
  "examples": [
    "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
  ]
}
04

Request Body

erforderlich

application/json

object
data object erforderlich

Source-declared fields; action-specific and account validation still apply.

minProperties
1
id kein Wert zulässig
date kein Wert zulässig
last_change kein Wert zulässig
type Typ nicht eingeschränkt

PHP int cast; integers are canonical. No rejecting wire type/range is checked; other JSON values also coerce. Hook calls Structure int cast, then adds scan_time=time(). Runtime preconditions / rejection: Missing attendance row makes callback false -> ED90100. No status enum/range check.

Kanonischer Typ nach Normalisierung: integer. Dies ist keine zusätzliche Einschränkung des Eingabetyps.

Schema-Beispiel
2
Feld-Metadaten aus der Spezifikation
{
  "x-edoobox-canonicalType": "integer",
  "x-edoobox-schemaStatus": "source-reviewed",
  "x-edoobox-contractSource": [
    {
      "file": "application/models/v2/Attendance.php",
      "line": 68,
      "lineStart": 68,
      "lineEnd": 81,
      "sha256": "3b6e39b9c7ee81764713b3dfd93e890c0c9cdb5459b4bae93047d785a5361f1d",
      "spanSha256": "41125089feddacf188b71610cb39d2b83f18945b124795aba38706a1f0db24fa",
      "reason": "Structure getter, output setter and field flags."
    },
    {
      "file": "application/models/v2/Attendancefunc.php",
      "line": 24,
      "lineStart": 24,
      "lineEnd": 55,
      "sha256": "ac2e9ccc3d95fa1d1d3459f43d850ccf4d45915dea576a4afd711adec5f0bf3c",
      "spanSha256": "a34a276bcaf3ae2f40914badc74a12d8f605e171f4af6b6b5a0b8a6b2cbd1ff1",
      "reason": "func delegates to _changeType"
    },
    {
      "file": "application/models/v2/Attendance.php",
      "line": 109,
      "lineStart": 109,
      "lineEnd": 152,
      "sha256": "3b6e39b9c7ee81764713b3dfd93e890c0c9cdb5459b4bae93047d785a5361f1d",
      "spanSha256": "bb5e60a6138346ecdb5b10e2b8c3ff68f063f87491cbd6c6b46e362d7284a7e1",
      "reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
    },
    {
      "file": "docs/openapi/reviews/domain-fields.json",
      "line": 1,
      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
      "sha256": "0da1cbbf108a5871b54204c3c76aaf59dabf85a6886bfb38210136885cfc1667"
    }
  ]
}
participant kein Wert zulässig

Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.

Feld-Metadaten aus der Spezifikation
{
  "x-edoobox-readOnlyFields": [
    "date",
    "last_change",
    "participant"
  ],
  "x-edoobox-clientRestriction": "Read-only fields are forbidden by this client contract to prevent silently ignored writes; the legacy API itself skips them. Explicit source-marked update context fields remain accepted for hook validation without changing their immutable database columns."
}
id string

Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.

pattern
"^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$"
Schema-Beispiel
"attendance_012345abcdef_123456"

Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.

Vollständiges Schema als JSON
{
  "type": "object",
  "properties": {
    "data": {
      "type": "object",
      "properties": {
        "id": false,
        "date": false,
        "last_change": false,
        "type": {
          "x-edoobox-canonicalType": "integer",
          "description": "PHP int cast; integers are canonical. No rejecting wire type/range is checked; other JSON values also coerce.\n\nHook calls Structure int cast, then adds scan_time=time().\n\nRuntime preconditions / rejection: Missing attendance row makes callback false -> ED90100. No status enum/range check.",
          "x-edoobox-schemaStatus": "source-reviewed",
          "examples": [
            2
          ],
          "x-edoobox-contractSource": [
            {
              "file": "application/models/v2/Attendance.php",
              "line": 68,
              "lineStart": 68,
              "lineEnd": 81,
              "sha256": "3b6e39b9c7ee81764713b3dfd93e890c0c9cdb5459b4bae93047d785a5361f1d",
              "spanSha256": "41125089feddacf188b71610cb39d2b83f18945b124795aba38706a1f0db24fa",
              "reason": "Structure getter, output setter and field flags."
            },
            {
              "file": "application/models/v2/Attendancefunc.php",
              "line": 24,
              "lineStart": 24,
              "lineEnd": 55,
              "sha256": "ac2e9ccc3d95fa1d1d3459f43d850ccf4d45915dea576a4afd711adec5f0bf3c",
              "spanSha256": "a34a276bcaf3ae2f40914badc74a12d8f605e171f4af6b6b5a0b8a6b2cbd1ff1",
              "reason": "func delegates to _changeType"
            },
            {
              "file": "application/models/v2/Attendance.php",
              "line": 109,
              "lineStart": 109,
              "lineEnd": 152,
              "sha256": "3b6e39b9c7ee81764713b3dfd93e890c0c9cdb5459b4bae93047d785a5361f1d",
              "spanSha256": "bb5e60a6138346ecdb5b10e2b8c3ff68f063f87491cbd6c6b46e362d7284a7e1",
              "reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
            },
            {
              "file": "docs/openapi/reviews/domain-fields.json",
              "line": 1,
              "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
              "sha256": "0da1cbbf108a5871b54204c3c76aaf59dabf85a6886bfb38210136885cfc1667"
            }
          ]
        },
        "participant": false
      },
      "additionalProperties": true,
      "description": "Source-declared fields; action-specific and account validation still apply.",
      "minProperties": 1,
      "x-edoobox-readOnlyFields": [
        "date",
        "last_change",
        "participant"
      ],
      "x-edoobox-clientRestriction": "Read-only fields are forbidden by this client contract to prevent silently ignored writes; the legacy API itself skips them. Explicit source-marked update context fields remain accepted for hook validation without changing their immutable database columns."
    },
    "id": {
      "type": "string",
      "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
      "description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
      "examples": [
        "attendance_012345abcdef_123456"
      ]
    }
  },
  "additionalProperties": true,
  "required": [
    "data"
  ]
}
Vorhandenen Präsenzstatus ändern
{
  "data": {
    "type": 1
  }
}
05

Antworten

11

HTTP-Status und Antwortinhalt gemeinsam auswerten. In dieser API können auch Antworten mit HTTP 200 einen Fehler enthalten.

200application/json

Erfolgreiche fachliche Rückgabe in data; zusätzlich error und success prüfen.

Response Header

X-Edoobox-Revision

Rotated account revision supplied for the next action in one reviewed sequence.

string
pattern
"^[a-f0-9]{32}$"
Vollständiges Schema als JSON
{
  "type": "string",
  "pattern": "^[a-f0-9]{32}$"
}

application/json

object
success boolean
error boolean | string
error_code string
data object
id string

Öffentliche v2-ID aus dem ausgewählten Konto; synthetische Beispiele ersetzen.

pattern
"^attendance_[a-f0-9]{12}_-?[0-9]+$"
Schema-Beispiel
"attendance_012345abcdef_123456"
update boolean

Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.

type string

Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.

Vollständiges Schema als JSON
{
  "type": "object",
  "properties": {
    "success": {
      "type": "boolean"
    },
    "error": {
      "type": [
        "boolean",
        "string"
      ]
    },
    "error_code": {
      "type": "string"
    },
    "data": {
      "type": "object",
      "properties": {
        "id": {
          "type": "string",
          "pattern": "^attendance_[a-f0-9]{12}_-?[0-9]+$",
          "description": "Öffentliche v2-ID aus dem ausgewählten Konto; synthetische Beispiele ersetzen.",
          "examples": [
            "attendance_012345abcdef_123456"
          ]
        },
        "update": {
          "type": "boolean"
        }
      },
      "additionalProperties": true
    },
    "type": {
      "type": "string"
    }
  },
  "additionalProperties": true
}
Beispiel
{
  "success": true,
  "error": false,
  "data": {
    "id": "attendance_012345abcdef_123456",
    "update": true
  }
}
400application/json

Invalid request.

application/json

Typ nicht eingeschränkt

Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.

Beispiel
{
  "success": false,
  "error": "ED40006"
}
401application/json

Missing/expired token, missing account context, account paused or model-specific authorization failure.

application/json

Typ nicht eingeschränkt

Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.

Beispiel
{
  "success": false,
  "error": "ED40103"
}
402application/json

Missing/invalid action data or subscription/operation restriction.

application/json

Typ nicht eingeschränkt

Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.

Beispiel
{
  "success": false,
  "error": "ED80100"
}
403application/json

Permission denied. Browser CORS rejection may have an empty body.

application/json

Typ nicht eingeschränkt

Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.

Beispiel
{
  "success": false,
  "error": "ED40340"
}
404application/json

Unknown resource/action or unsupported method.

application/json

Typ nicht eingeschränkt

Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.

Beispiel
{
  "success": false,
  "error": "ED80019"
}
409application/json

The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.

application/json

object

Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.

Vollständiges Schema als JSON
{
  "type": "object",
  "additionalProperties": true
}
Beispiel
{
  "error": "ED40901",
  "error_code": "mutation_revision_conflict"
}
422application/json

Validation failed.

application/json

Typ nicht eingeschränkt

Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.

Beispiel
{
  "success": false,
  "error": "ED80020"
}
429application/json

Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.

Response Header

Retry-After

Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.

string
Schema-Beispiel
"30"
Vollständiges Schema als JSON
{
  "type": "string",
  "examples": [
    "30"
  ]
}

application/json

Typ nicht eingeschränkt

Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.

Beispiel
{
  "success": false,
  "error": "ED42902"
}
502application/json

Server-side operation failed.

application/json

Typ nicht eingeschränkt

Kein Schema angegeben. Daraus lässt sich kein vollständiger Feldvertrag ableiten.

Beispiel
{
  "success": false,
  "error": "ED50201"
}
503application/json

The account mutation lock or revision store is unavailable. No unprotected fallback is executed.

Response Header

Retry-After

integer

Fester Wert: 1

Vollständiges Schema als JSON
{
  "type": "integer",
  "const": 1
}

application/json

object

Zusätzliche, hier nicht aufgeführte Felder sind erlaubt.

Vollständiges Schema als JSON
{
  "type": "object",
  "additionalProperties": true
}
Beispiel
{
  "error": "ED50301",
  "error_code": "mutation_revision_busy"
}
06

Quelle & Metadaten

Quelle laut Spezifikationapplication/models/v2/Attendance.php:145updateAttendance()

Diese Angaben stammen unverändert aus der gelieferten OpenAPI-Datei. Zusätzliche Freigaben, Vorbedingungen, sensible Felder und Hinweise stehen in den Erweiterungen.

x-edoobox-mutates-state
true
x-edoobox-runtimeMutationGuard
true
x-edoobox-documentationReview
{
  "file": "docs/openapi/operation-contracts/02-booking-users.json",
  "notes": []
}
x-edoobox-source
{
  "file": "application/models/v2/Attendance.php",
  "method": "updateAttendance",
  "line": 145
}
x-edoobox-documentationStatus
"reviewed"
x-edoobox-readOnly
false
x-edoobox-safeForAutomation
false
x-edoobox-permission
{
  "resource": "attendance",
  "short": "atte",
  "checkedByDispatcher": true,
  "levels": [
    3,
    4
  ],
  "description": "Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope."
}
Vollständige Operation als JSON
{
  "operationId": "put_v2_attendance_id",
  "summary": "Vorhandenen Präsenzstatus ändern",
  "description": "Aktualisiert type eines bestehenden Präsenzdatensatzes und schreibt dabei einen Statusverlauf mit Bearbeiter. date und participant bleiben unveränderlich. Ohne Pfad-ID ist die öffentliche attendance-ID im obersten id-Feld erforderlich; last_change wird beim Statuswechsel serverseitig gesetzt.",
  "tags": [
    "attendance"
  ],
  "security": [
    {
      "bearerAuth": [],
      "accountContext": []
    },
    {
      "sessionCookie": [],
      "accountContext": []
    }
  ],
  "parameters": [
    {
      "name": "id",
      "in": "path",
      "required": true,
      "description": "v2 object identifier in the selected account.",
      "schema": {
        "type": "string",
        "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
        "description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
        "examples": [
          "attendance_012345abcdef_123456"
        ]
      }
    },
    {
      "name": "language",
      "in": "header",
      "required": false,
      "description": "Account language code, where the resource supports setLanguage().",
      "schema": {
        "type": "string",
        "examples": [
          "de"
        ]
      }
    },
    {
      "name": "X-Edoobox-If-Revision",
      "in": "header",
      "required": false,
      "schema": {
        "type": "string",
        "pattern": "^[a-f0-9]{32}$",
        "examples": [
          "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"
        ]
      },
      "description": "Optional account mutation revision from a preceding authenticated auth-context snapshot. The dispatcher compares it while holding the account lock; mismatch409 requires a new review."
    }
  ],
  "responses": {
    "200": {
      "description": "Erfolgreiche fachliche Rückgabe in data; zusätzlich error und success prüfen.",
      "content": {
        "application/json": {
          "example": {
            "success": true,
            "error": false,
            "data": {
              "id": "attendance_012345abcdef_123456",
              "update": true
            }
          },
          "schema": {
            "type": "object",
            "properties": {
              "success": {
                "type": "boolean"
              },
              "error": {
                "type": [
                  "boolean",
                  "string"
                ]
              },
              "error_code": {
                "type": "string"
              },
              "data": {
                "type": "object",
                "properties": {
                  "id": {
                    "type": "string",
                    "pattern": "^attendance_[a-f0-9]{12}_-?[0-9]+$",
                    "description": "Öffentliche v2-ID aus dem ausgewählten Konto; synthetische Beispiele ersetzen.",
                    "examples": [
                      "attendance_012345abcdef_123456"
                    ]
                  },
                  "update": {
                    "type": "boolean"
                  }
                },
                "additionalProperties": true
              },
              "type": {
                "type": "string"
              }
            },
            "additionalProperties": true
          }
        }
      },
      "headers": {
        "X-Edoobox-Revision": {
          "schema": {
            "type": "string",
            "pattern": "^[a-f0-9]{32}$"
          },
          "description": "Rotated account revision supplied for the next action in one reviewed sequence."
        }
      }
    },
    "400": {
      "description": "Invalid request.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40006"
          }
        }
      }
    },
    "401": {
      "description": "Missing/expired token, missing account context, account paused or model-specific authorization failure.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40103"
          }
        }
      }
    },
    "402": {
      "description": "Missing/invalid action data or subscription/operation restriction.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80100"
          }
        }
      }
    },
    "403": {
      "description": "Permission denied. Browser CORS rejection may have an empty body.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED40340"
          }
        }
      }
    },
    "404": {
      "description": "Unknown resource/action or unsupported method.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80019"
          }
        }
      }
    },
    "409": {
      "description": "The account changed after the reviewed read. No domain operation is dispatched; obtain fresh state and review again.",
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED40901",
            "error_code": "mutation_revision_conflict"
          }
        }
      }
    },
    "422": {
      "description": "Validation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED80020"
          }
        }
      }
    },
    "429": {
      "description": "Request/login rate limit exceeded. Honor Retry-After when supplied; legacy rate-limit paths may omit it. Retry only proven reads within a bounded deadline; a mutation is never automatically replayed after an ambiguous response.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED42902"
          }
        }
      },
      "headers": {
        "Retry-After": {
          "description": "Optional server delay in whole seconds or an HTTP date. Absence is not permission for an immediate retry.",
          "schema": {
            "type": "string",
            "examples": [
              "30"
            ]
          }
        }
      }
    },
    "502": {
      "description": "Server-side operation failed.",
      "content": {
        "application/json": {
          "example": {
            "success": false,
            "error": "ED50201"
          }
        }
      }
    },
    "503": {
      "description": "The account mutation lock or revision store is unavailable. No unprotected fallback is executed.",
      "headers": {
        "Retry-After": {
          "schema": {
            "type": "integer",
            "const": 1
          }
        }
      },
      "content": {
        "application/json": {
          "schema": {
            "type": "object",
            "additionalProperties": true
          },
          "example": {
            "error": "ED50301",
            "error_code": "mutation_revision_busy"
          }
        }
      }
    }
  },
  "x-edoobox-mutates-state": true,
  "requestBody": {
    "required": true,
    "content": {
      "application/json": {
        "schema": {
          "type": "object",
          "properties": {
            "data": {
              "type": "object",
              "properties": {
                "id": false,
                "date": false,
                "last_change": false,
                "type": {
                  "x-edoobox-canonicalType": "integer",
                  "description": "PHP int cast; integers are canonical. No rejecting wire type/range is checked; other JSON values also coerce.\n\nHook calls Structure int cast, then adds scan_time=time().\n\nRuntime preconditions / rejection: Missing attendance row makes callback false -> ED90100. No status enum/range check.",
                  "x-edoobox-schemaStatus": "source-reviewed",
                  "examples": [
                    2
                  ],
                  "x-edoobox-contractSource": [
                    {
                      "file": "application/models/v2/Attendance.php",
                      "line": 68,
                      "lineStart": 68,
                      "lineEnd": 81,
                      "sha256": "3b6e39b9c7ee81764713b3dfd93e890c0c9cdb5459b4bae93047d785a5361f1d",
                      "spanSha256": "41125089feddacf188b71610cb39d2b83f18945b124795aba38706a1f0db24fa",
                      "reason": "Structure getter, output setter and field flags."
                    },
                    {
                      "file": "application/models/v2/Attendancefunc.php",
                      "line": 24,
                      "lineStart": 24,
                      "lineEnd": 55,
                      "sha256": "ac2e9ccc3d95fa1d1d3459f43d850ccf4d45915dea576a4afd711adec5f0bf3c",
                      "spanSha256": "a34a276bcaf3ae2f40914badc74a12d8f605e171f4af6b6b5a0b8a6b2cbd1ff1",
                      "reason": "func delegates to _changeType"
                    },
                    {
                      "file": "application/models/v2/Attendance.php",
                      "line": 109,
                      "lineStart": 109,
                      "lineEnd": 152,
                      "sha256": "3b6e39b9c7ee81764713b3dfd93e890c0c9cdb5459b4bae93047d785a5361f1d",
                      "spanSha256": "bb5e60a6138346ecdb5b10e2b8c3ff68f063f87491cbd6c6b46e362d7284a7e1",
                      "reason": "Actual resource dispatch and generic writer reachability; action branches are distinct."
                    },
                    {
                      "file": "docs/openapi/reviews/domain-fields.json",
                      "line": 1,
                      "reason": "Independent field-level source review, direction applicability, examples and explicit runtime limitations.",
                      "sha256": "0da1cbbf108a5871b54204c3c76aaf59dabf85a6886bfb38210136885cfc1667"
                    }
                  ]
                },
                "participant": false
              },
              "additionalProperties": true,
              "description": "Source-declared fields; action-specific and account validation still apply.",
              "minProperties": 1,
              "x-edoobox-readOnlyFields": [
                "date",
                "last_change",
                "participant"
              ],
              "x-edoobox-clientRestriction": "Read-only fields are forbidden by this client contract to prevent silently ignored writes; the legacy API itself skips them. Explicit source-marked update context fields remain accepted for hook validation without changing their immutable database columns."
            },
            "id": {
              "type": "string",
              "pattern": "^[a-z0-9]+_[a-f0-9]{12}_-?[0-9]+$",
              "description": "Opaque edoobox v2 object ID returned by this account. Never send a raw database ID. The synthetic example is illustrative and is not a real record.",
              "examples": [
                "attendance_012345abcdef_123456"
              ]
            }
          },
          "additionalProperties": true,
          "required": [
            "data"
          ]
        },
        "examples": {
          "request": {
            "summary": "Vorhandenen Präsenzstatus ändern",
            "value": {
              "data": {
                "type": 1
              }
            }
          }
        }
      }
    }
  },
  "x-edoobox-runtimeMutationGuard": true,
  "x-edoobox-documentationReview": {
    "file": "docs/openapi/operation-contracts/02-booking-users.json",
    "notes": []
  },
  "x-edoobox-source": {
    "file": "application/models/v2/Attendance.php",
    "method": "updateAttendance",
    "line": 145
  },
  "x-edoobox-documentationStatus": "reviewed",
  "x-edoobox-readOnly": false,
  "x-edoobox-safeForAutomation": false,
  "x-edoobox-permission": {
    "resource": "attendance",
    "short": "atte",
    "checkedByDispatcher": true,
    "levels": [
      3,
      4
    ],
    "description": "Resource permission mapping from APIPermissions(), Authfunc::_getCheckJWT. Additional model/admin/plugin checks may apply; resources absent from api_permission do not acquire a fictitious scope."
  }
}