fs
0c351f6aff
Move the entire audit subsystem (system audit, API audit, import audit, user lifecycle audit, frontend telemetry) from core into modules/audit/. Core decoupling via interface-based injection: - AuditRecorderInterface replaces SystemAuditService in 10+ core services - UserLifecycleAuditInterface / ImportAuditInterface for specialized flows - NullAuditRecorder fallback when audit module is disabled - ApiBootstrap/ApiResponse use null-safe callable resolvers Module structure (modules/audit/): - Manifest with routes, permissions, scheduler jobs, authorization policy - 9 services, 8 repositories, 6 domain enums, 4 job handlers - 33 page files, 4 JS files, 8 test files, migration scripts, i18n Core cleanup: - OperationsAuthorizationPolicy, UiCapabilityMap, PermissionService surgically cleaned of audit-specific constants - Sidebar template cleared of hardcoded audit navigation - AuditModuleIsolationContractTest ensures no future core→module coupling All quality gates pass: 1346 tests (19,276 assertions), PHPStan level 5 clean, architecture contracts verified. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
34 lines
1.2 KiB
PHP
34 lines
1.2 KiB
PHP
<?php
|
|
|
|
use MintyPHP\Buffer;
|
|
use MintyPHP\Http\SessionStoreInterface;
|
|
use MintyPHP\Module\Audit\AuditAuthorizationPolicy;
|
|
use MintyPHP\Module\Audit\Domain\UserLifecycleAction;
|
|
use MintyPHP\Router;
|
|
use MintyPHP\Service\Access\UiAccessService;
|
|
use MintyPHP\Support\Flash;
|
|
use MintyPHP\Support\Guard;
|
|
|
|
$session = app(SessionStoreInterface::class)->all();
|
|
Guard::requireLogin();
|
|
Guard::requireAbility(AuditAuthorizationPolicy::ABILITY_USER_LIFECYCLE_VIEW);
|
|
|
|
$auditId = (int) ($id ?? 0);
|
|
$auditService = app(\MintyPHP\Module\Audit\Service\UserLifecycleAuditService::class);
|
|
$auditLog = $auditId > 0 ? $auditService->find($auditId) : null;
|
|
if (!$auditLog) {
|
|
Flash::error(t('Lifecycle audit entry not found'), 'admin/user-lifecycle-audit', 'user_lifecycle_audit_not_found');
|
|
Router::redirect('admin/user-lifecycle-audit');
|
|
}
|
|
|
|
$snapshot = null;
|
|
if ((string) ($auditLog['action'] ?? '') === UserLifecycleAction::Delete->value) {
|
|
$snapshot = $auditService->decryptSnapshot($auditLog);
|
|
}
|
|
$viewAuth['page'] = app(UiAccessService::class)->pageCapabilities(
|
|
(int) ($session['user']['id'] ?? 0),
|
|
['can_restore' => AuditAuthorizationPolicy::ABILITY_USER_LIFECYCLE_RESTORE]
|
|
);
|
|
|
|
Buffer::set('title', t('View user lifecycle audit entry'));
|