kolaente 3a666da860 feat: audit admin reads and denied admin access ...

GET /admin/users returns every user's email address; compliance
regimes commonly require admin PII access to be logged, so the list
read now emits admin.users.listed. The admin gate additionally emits
admin.access.denied (outcome=failure, with method and path) whenever
an authenticated user without the instance-admin flag probes an
/admin/* route — dispatched directly with the request context since
there is no transaction.

Both entries have no single affected resource, so the entry target is
now omitted when empty instead of serialising a zero value.

2026-07-03 16:56:03 +00:00

..

audit_test.go

refactor(events): pass context to DispatchPending directly

2026-06-12 08:56:08 +00:00

entry.go

feat: audit admin reads and denied admin access

2026-07-03 16:56:03 +00:00

listener.go

refactor(events): use a concrete doer on project and team events

2026-06-12 08:56:08 +00:00

writer.go

fix(audit): handle reopen failure after a failed rotation

2026-06-12 08:56:08 +00:00