Overview
SMALDA handles legal land documents where accountability is critical. There is no audit trail for sensitive operations: who uploaded a document, who deleted it, when a user's role was changed. An audit log provides forensic traceability and is a baseline requirement for any platform dealing with land records.
Background
Files to create:
backend/src/audit/entities/audit-log.entity.tsbackend/src/audit/audit.service.tsbackend/src/audit/audit.module.ts
AuditLog entity fields:
id (UUID)actorId (UUID — the user who performed the action, nullable for system actions)actorRole (string — snapshot of role at time of action)action: enum DOCUMENT_UPLOAD | DOCUMENT_DELETE | DOCUMENT_VERIFY | DOCUMENT_ARCHIVE | USER_ROLE_CHANGE | USER_DELETE | DISPUTE_CREATED | DISPUTE_RESOLVEDtargetType (string — e.g., 'Document', 'User')targetId (UUID)metadata (JSON — optional extra context, e.g., old vs new role)ipAddress (string)createdAt (timestamp)
AuditService methods:
log(dto: CreateAuditLogDto) — insert a recordfindAll(filters, pagination) — for the admin endpoint
Acceptance Criteria
Overview
SMALDA handles legal land documents where accountability is critical. There is no audit trail for sensitive operations: who uploaded a document, who deleted it, when a user's role was changed. An audit log provides forensic traceability and is a baseline requirement for any platform dealing with land records.
Background
Files to create:
backend/src/audit/entities/audit-log.entity.tsbackend/src/audit/audit.service.tsbackend/src/audit/audit.module.tsAuditLogentity fields:id(UUID)actorId(UUID — the user who performed the action, nullable for system actions)actorRole(string — snapshot of role at time of action)action: enumDOCUMENT_UPLOAD | DOCUMENT_DELETE | DOCUMENT_VERIFY | DOCUMENT_ARCHIVE | USER_ROLE_CHANGE | USER_DELETE | DISPUTE_CREATED | DISPUTE_RESOLVEDtargetType(string — e.g., 'Document', 'User')targetId(UUID)metadata(JSON — optional extra context, e.g., old vs new role)ipAddress(string)createdAt(timestamp)AuditServicemethods:log(dto: CreateAuditLogDto)— insert a recordfindAll(filters, pagination)— for the admin endpointAcceptance Criteria
audit_logstableAuditService.log()called in:DocumentsService.create(),DocumentsService.delete(),StellarService.anchorHash(),UsersServicerole changeAuditModulecreated and imported inAppModuleAuditServiceexported for injection by other modules