Implement superadmin audit log for mutations
Some checks failed
linter / quality (push) Has been cancelled
tests / ci (push) Has been cancelled
tests / ui (push) Has been cancelled

This commit is contained in:
Codex Agent
2026-01-02 11:57:49 +01:00
parent 8b4950c79d
commit 412ecbe691
82 changed files with 1766 additions and 192 deletions

View File

@@ -10,6 +10,7 @@ use App\Filament\Resources\TenantResource\Schemas\TenantInfolist;
use App\Jobs\AnonymizeAccount;
use App\Models\Tenant;
use App\Notifications\InactiveTenantDeletionWarning;
use App\Services\Audit\SuperAdminAuditLogger;
use App\Services\Tenant\TenantLifecycleLogger;
use BackedEnum;
use Carbon\Carbon;
@@ -27,6 +28,7 @@ use Filament\Resources\Resource;
use Filament\Schemas\Schema;
use Filament\Tables;
use Filament\Tables\Table;
use Illuminate\Database\Eloquent\Collection;
use Illuminate\Support\Facades\Notification as NotificationFacade;
use Illuminate\Support\Facades\Route;
use UnitEnum;
@@ -180,7 +182,13 @@ class TenantResource extends Resource
])
->filters([])
->actions([
Actions\EditAction::make(),
Actions\EditAction::make()
->after(fn (array $data, Tenant $record) => app(SuperAdminAuditLogger::class)->recordModelMutation(
'updated',
$record,
SuperAdminAuditLogger::fieldsMetadata($data),
static::class
)),
Actions\Action::make('add_package')
->label('Package hinzufügen')
->icon('heroicon-o-plus')
@@ -213,6 +221,13 @@ class TenantResource extends Resource
'price' => 0,
'metadata' => ['reason' => $data['reason'] ?? 'manual assignment'],
]);
app(SuperAdminAuditLogger::class)->record(
'tenant.package_added',
$record,
SuperAdminAuditLogger::fieldsMetadata($data),
source: static::class
);
}),
Actions\Action::make('export')
->label('Daten exportieren')
@@ -225,7 +240,18 @@ class TenantResource extends Resource
->icon('heroicon-o-shield-exclamation'),
])
->bulkActions([
Actions\DeleteBulkAction::make(),
Actions\DeleteBulkAction::make()
->after(function (Collection $records): void {
$logger = app(SuperAdminAuditLogger::class);
foreach ($records as $record) {
$logger->recordModelMutation(
'deleted',
$record,
source: static::class
);
}
}),
]);
}
@@ -269,6 +295,13 @@ class TenantResource extends Resource
actor: Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.activated',
$record,
SuperAdminAuditLogger::fieldsMetadata(['is_active']),
source: static::class
);
return $updated;
}),
Actions\Action::make('deactivate')
@@ -287,6 +320,13 @@ class TenantResource extends Resource
actor: Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.deactivated',
$record,
SuperAdminAuditLogger::fieldsMetadata(['is_active']),
source: static::class
);
return $updated;
}),
Actions\Action::make('suspend')
@@ -305,6 +345,13 @@ class TenantResource extends Resource
actor: Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.suspended',
$record,
SuperAdminAuditLogger::fieldsMetadata(['is_suspended']),
source: static::class
);
return $updated;
}),
Actions\Action::make('unsuspend')
@@ -322,6 +369,13 @@ class TenantResource extends Resource
actor: Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.unsuspended',
$record,
SuperAdminAuditLogger::fieldsMetadata(['is_suspended']),
source: static::class
);
return $updated;
}),
Actions\Action::make('schedule_deletion')
@@ -374,6 +428,13 @@ class TenantResource extends Resource
],
Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.deletion_scheduled',
$record,
SuperAdminAuditLogger::fieldsMetadata($data),
source: static::class
);
})
->successNotificationTitle(__('admin.tenants.actions.schedule_deletion_success')),
Actions\Action::make('cancel_deletion')
@@ -398,6 +459,13 @@ class TenantResource extends Resource
],
Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.deletion_cancelled',
$record,
SuperAdminAuditLogger::fieldsMetadata(['pending_deletion_at', 'deletion_warning_sent_at']),
source: static::class
);
})
->successNotificationTitle(__('admin.tenants.actions.cancel_deletion_success')),
Actions\Action::make('anonymize_now')
@@ -415,6 +483,13 @@ class TenantResource extends Resource
'anonymize_requested',
actor: Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.anonymize_requested',
$record,
SuperAdminAuditLogger::fieldsMetadata([]),
source: static::class
);
})
->successNotificationTitle(__('admin.tenants.actions.anonymize_success')),
];
@@ -472,6 +547,13 @@ class TenantResource extends Resource
],
Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.limits_updated',
$record,
SuperAdminAuditLogger::fieldsMetadata($data),
source: static::class
);
}),
Actions\Action::make('update_subscription_expires_at')
->label(__('admin.tenants.actions.update_subscription_expires_at'))
@@ -508,6 +590,13 @@ class TenantResource extends Resource
],
Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.subscription_expires_at_updated',
$record,
SuperAdminAuditLogger::fieldsMetadata($data),
source: static::class
);
}),
Actions\Action::make('set_grace_period')
->label(__('admin.tenants.actions.set_grace_period'))
@@ -537,6 +626,13 @@ class TenantResource extends Resource
],
Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.grace_period_set',
$record,
SuperAdminAuditLogger::fieldsMetadata($data),
source: static::class
);
}),
Actions\Action::make('clear_grace_period')
->label(__('admin.tenants.actions.clear_grace_period'))
@@ -560,6 +656,13 @@ class TenantResource extends Resource
],
Filament::auth()->user()
);
app(SuperAdminAuditLogger::class)->record(
'tenant.grace_period_cleared',
$record,
SuperAdminAuditLogger::fieldsMetadata(['grace_period_ends_at']),
source: static::class
);
}),
];
}