admin.schubert/Olympus
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(platform): add audit logs and activity feed

Browse source
This commit is contained in:
Schubert Ferenc 2026-07-03 00:04:44 +02:00
parent 92cb8d1286
commit c816e9869d
34 changed files with 1592 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

86
backend/hermes/alembic/versions/a5e4b7c9d012_add_audit_logs.py Normal file
View file

@ -0,0 +1,86 @@
"""add audit logs
Revision ID: a5e4b7c9d012
Revises: 9c1d8a2f6b44
Create Date: 2026-07-02 15:00:00.000000
"""
from typing import Sequence, Union
from alembic import op
import sqlalchemy as sa
revision: str = "a5e4b7c9d012"
down_revision: Union[str, Sequence[str], None] = "9c1d8a2f6b44"
branch_labels: Union[str, Sequence[str], None] = None
depends_on: Union[str, Sequence[str], None] = None
def upgrade() -> None:
op.create_table(
"audit_logs",
sa.Column("id", sa.Integer(), nullable=False),
sa.Column("actor_user_id", sa.Integer(), nullable=True),
sa.Column("actor_username", sa.String(length=120), server_default="", nullable=False),
sa.Column("action", sa.String(length=120), nullable=False),
sa.Column("entity_type", sa.String(length=80), nullable=False),
sa.Column("entity_id", sa.Integer(), nullable=True),
sa.Column("entity_label", sa.String(length=255), server_default="", nullable=False),
sa.Column("ip_address", sa.String(length=80), server_default="", nullable=False),
sa.Column("user_agent", sa.Text(), server_default="", nullable=False),
sa.Column("before_data", sa.JSON(), nullable=True),
sa.Column("after_data", sa.JSON(), nullable=True),
sa.Column("metadata", sa.JSON(), nullable=True),
sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now(), nullable=False),
sa.ForeignKeyConstraint(["actor_user_id"], ["users.id"], ondelete="SET NULL"),
sa.PrimaryKeyConstraint("id"),
)
op.create_index(op.f("ix_audit_logs_action"), "audit_logs", ["action"], unique=False)
op.create_index(op.f("ix_audit_logs_actor_user_id"), "audit_logs", ["actor_user_id"], unique=False)
op.create_index(op.f("ix_audit_logs_entity_id"), "audit_logs", ["entity_id"], unique=False)
op.create_index(op.f("ix_audit_logs_entity_type"), "audit_logs", ["entity_type"], unique=False)
op.create_index(op.f("ix_audit_logs_created_at"), "audit_logs", ["created_at"], unique=False)
op.execute(
"""
INSERT INTO permissions (name, display_name, description, module)
SELECT 'audit_logs.read', 'Audit Logs lesen', 'Audit Logs anzeigen', 'audit_logs'
WHERE NOT EXISTS (
SELECT 1 FROM permissions WHERE name = 'audit_logs.read'
)
"""
)
op.execute(
"""
INSERT INTO role_permissions (role_id, permission_id)
SELECT roles.id, permissions.id
FROM roles
JOIN permissions ON permissions.name = 'audit_logs.read'
WHERE roles.name = 'administrator'
AND NOT EXISTS (
SELECT 1
FROM role_permissions
WHERE role_permissions.role_id = roles.id
AND role_permissions.permission_id = permissions.id
)
"""
)
def downgrade() -> None:
op.execute(
"""
DELETE FROM role_permissions
USING permissions
WHERE role_permissions.permission_id = permissions.id
AND permissions.name = 'audit_logs.read'
"""
)
op.execute("DELETE FROM permissions WHERE name = 'audit_logs.read'")
op.drop_index(op.f("ix_audit_logs_created_at"), table_name="audit_logs")
op.drop_index(op.f("ix_audit_logs_entity_type"), table_name="audit_logs")
op.drop_index(op.f("ix_audit_logs_entity_id"), table_name="audit_logs")
op.drop_index(op.f("ix_audit_logs_actor_user_id"), table_name="audit_logs")
op.drop_index(op.f("ix_audit_logs_action"), table_name="audit_logs")
op.drop_table("audit_logs")