Audit Log for High-Risk Admin Actions

[jaynomyaro]

📖 Description
This PR introduces an audit logging mechanism to track and record all high-risk administrative actions within the system. The goal is to improve security, accountability, and compliance by ensuring that sensitive operations are logged and traceable.

🔒 Scope of High-Risk Actions
The following admin actions are considered high-risk and will now be logged:

User account creation, deletion, or privilege escalation

Role/permission modifications

System configuration changes

Data export/import operations

Security policy updates (e.g., password rules, MFA enforcement)

🛠️ Implementation Details
Added a new AuditLogService to capture events.

Each log entry includes:

Timestamp

Admin user ID

Action type

Target entity (user, role, system setting, etc.)

Request metadata (IP, session ID)

Logs are stored in a secure, append-only database table.

Integrated with existing monitoring tools for alerting on suspicious activity.

✅ Testing
Unit tests for AuditLogService covering all high-risk actions.

Integration tests to verify logs are generated during admin workflows.

Manual validation in staging environment.

📊 Compliance & Security
Aligns with ISO 27001 and SOC 2 audit requirements.

Provides traceability for incident response and forensic analysis.

Ensures accountability for privileged users.

🚀 Next Steps
Extend logging to cover API-based admin actions.

Add dashboard for audit log visualization.

Implement retention policy and secure archival.closed #552

[vercel]

@jaynomyaro is attempting to deploy a commit to the Cedarich's projects Team on Vercel.

A member of the Team first needs to authorize it.

[drips-wave]

@jaynomyaro Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[Cedarich]

@jaynomyaro fix workflow