Audit log: RBAC change filtering and highlighting #84

New Issue

claude · 2026-03-17T19:15:05+01:00

claude commented

2026-03-17 19:15:05 +01:00

Context

All RBAC mutations (role assignment, group membership changes, user creation/deletion) are logged to the audit log via AuditService with categories USER_MGMT and RBAC. The audit log page (/admin/audit) exists but does not provide category-specific filtering or highlighting for RBAC events.

Requirements

Backend

GET /api/v1/admin/audit already supports filtering — verify it supports category query parameter
If not, add ?category=USER_MGMT,RBAC filter support

UI enhancements

Add category filter dropdown/chips to the audit log page (filter by USER_MGMT, RBAC, AUTH, CONFIG, etc.)
Highlight RBAC-related entries with a distinct color or icon
Show structured detail for RBAC events: e.g., "Assigned role OPERATOR to user:alice" rather than raw JSON
Quick filter: "Show RBAC changes only" toggle

From RBAC user/group/role detail panes, add a "View audit history" link that opens the audit log pre-filtered to that entity

Notes

Audit categories defined in AuditCategory.java: AUTH, USER_MGMT, CONFIG, SECURITY, DATA (check if RBAC is a separate category or uses USER_MGMT)

## Context All RBAC mutations (role assignment, group membership changes, user creation/deletion) are logged to the audit log via `AuditService` with categories `USER_MGMT` and `RBAC`. The audit log page (`/admin/audit`) exists but does not provide category-specific filtering or highlighting for RBAC events. ## Requirements ### Backend - `GET /api/v1/admin/audit` already supports filtering — verify it supports `category` query parameter - If not, add `?category=USER_MGMT,RBAC` filter support ### UI enhancements - Add category filter dropdown/chips to the audit log page (filter by USER_MGMT, RBAC, AUTH, CONFIG, etc.) - Highlight RBAC-related entries with a distinct color or icon - Show structured detail for RBAC events: e.g., "Assigned role OPERATOR to user:alice" rather than raw JSON - Quick filter: "Show RBAC changes only" toggle ### Linked navigation - From RBAC user/group/role detail panes, add a "View audit history" link that opens the audit log pre-filtered to that entity ## Notes - Audit categories defined in `AuditCategory.java`: AUTH, USER_MGMT, CONFIG, SECURITY, DATA (check if RBAC is a separate category or uses USER_MGMT)

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: cameleer/cameleer-server#84