ahmido
28cfe38ba4
## Summary - turn the Monitoring audit log placeholder into a real workspace-scoped audit review surface - introduce a shared audit recorder, richer audit value objects, and additive audit log schema evolution - add audit outcome and actor badges, permission-aware related navigation, and durable audit retention coverage ## Included - canonical `/admin/audit-log` list and detail inspection UI - audit model helpers, taxonomy expansion, actor/target snapshots, and recorder/builder services - operation terminal audit writes and purge command retention changes - spec 134 design artifacts and focused Pest coverage for audit foundation behavior ## Validation - `vendor/bin/sail bin pint --dirty --format agent` - `vendor/bin/sail artisan test --compact tests/Unit/Audit tests/Unit/Badges/AuditBadgesTest.php tests/Feature/Filament/AuditLogPageTest.php tests/Feature/Filament/AuditLogDetailInspectionTest.php tests/Feature/Filament/AuditLogAuthorizationTest.php tests/Feature/Monitoring/AuditCoverageGovernanceTest.php tests/Feature/Monitoring/AuditCoverageOperationsTest.php tests/Feature/Console/TenantpilotPurgeNonPersistentDataTest.php` ## Notes - Livewire v4.0+ compliance is preserved within the existing Filament v5 application. - No provider registration changes were needed; panel provider registration remains in `bootstrap/providers.php`. - No new globally searchable resource was introduced. - The audit page remains read-only; no destructive actions were added. - No new asset pipeline changes were introduced; existing deploy-time `php artisan filament:assets` behavior remains unchanged. Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #163
65 lines
2.2 KiB
PHP
65 lines
2.2 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Models\AuditLog;
|
|
use App\Support\Audit\AuditActorType;
|
|
use App\Support\Audit\AuditOutcome;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Illuminate\Support\Facades\Schema;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
it('keeps the evolved audit columns available for legacy readers', function (): void {
|
|
expect(Schema::hasColumns('audit_logs', [
|
|
'summary',
|
|
'outcome',
|
|
'actor_type',
|
|
'actor_label',
|
|
'target_label',
|
|
'operation_run_id',
|
|
]))->toBeTrue();
|
|
});
|
|
|
|
it('backfills summary, actor, and outcome semantics for legacy audit rows', function (): void {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$audit = AuditLog::query()->create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'actor_email' => 'ops@example.com',
|
|
'action' => 'restore.failed',
|
|
'resource_type' => 'restore_run',
|
|
'resource_id' => '55',
|
|
'status' => 'error',
|
|
'metadata' => [
|
|
'reason_code' => 'graph.unavailable',
|
|
],
|
|
'recorded_at' => now(),
|
|
])->refresh();
|
|
|
|
expect($audit->summaryText())->toBe('Restore failed for Restore run #55')
|
|
->and($audit->normalizedOutcome())->toBe(AuditOutcome::Failed)
|
|
->and($audit->actorSnapshot()->type)->toBe(AuditActorType::Human)
|
|
->and($audit->actorDisplayLabel())->toBe('ops@example.com')
|
|
->and($audit->targetDisplayLabel())->toBe('Restore run #55');
|
|
});
|
|
|
|
it('keeps target labels intelligible when the source record no longer exists', function (): void {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$audit = AuditLog::query()->create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'action' => 'backup.archived',
|
|
'resource_type' => 'backup_set',
|
|
'resource_id' => '999999',
|
|
'status' => 'success',
|
|
'metadata' => [],
|
|
'recorded_at' => now(),
|
|
])->refresh();
|
|
|
|
expect($audit->targetDisplayLabel())->toBe('Backup set #999999')
|
|
->and($audit->summaryText())->toBe('Backup set archived for Backup set #999999');
|
|
});
|