Creates AuditLog model with JSONB details column for tracking admin actions. Integrates log_audit() helper into admin endpoints (role change, team admin toggle, deactivate, activate) and tree delete. IP address column reserved for future Railway proxy header support. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
46 lines
1.7 KiB
Python
46 lines
1.7 KiB
Python
"""add audit_logs table
|
|
|
|
Revision ID: 014
|
|
Revises: 013
|
|
Create Date: 2026-02-05
|
|
|
|
"""
|
|
from typing import Sequence, Union
|
|
|
|
from alembic import op
|
|
import sqlalchemy as sa
|
|
from sqlalchemy.dialects.postgresql import UUID, JSONB
|
|
|
|
|
|
# revision identifiers, used by Alembic.
|
|
revision: str = '014'
|
|
down_revision: Union[str, None] = '013'
|
|
branch_labels: Union[str, Sequence[str], None] = None
|
|
depends_on: Union[str, Sequence[str], None] = None
|
|
|
|
|
|
def upgrade() -> None:
|
|
op.create_table(
|
|
'audit_logs',
|
|
sa.Column('id', UUID(as_uuid=True), primary_key=True),
|
|
sa.Column('user_id', UUID(as_uuid=True), sa.ForeignKey('users.id'), nullable=False),
|
|
sa.Column('action', sa.String(50), nullable=False),
|
|
sa.Column('resource_type', sa.String(50), nullable=False),
|
|
sa.Column('resource_id', UUID(as_uuid=True), nullable=True),
|
|
sa.Column('details', JSONB, nullable=True),
|
|
sa.Column('ip_address', sa.String(45), nullable=True),
|
|
sa.Column('created_at', sa.DateTime(timezone=True), server_default=sa.func.now()),
|
|
)
|
|
op.create_index('ix_audit_logs_user_id', 'audit_logs', ['user_id'])
|
|
op.create_index('ix_audit_logs_action', 'audit_logs', ['action'])
|
|
op.create_index('ix_audit_logs_resource_type', 'audit_logs', ['resource_type'])
|
|
op.create_index('ix_audit_logs_created_at', 'audit_logs', ['created_at'])
|
|
|
|
|
|
def downgrade() -> None:
|
|
op.drop_index('ix_audit_logs_created_at', table_name='audit_logs')
|
|
op.drop_index('ix_audit_logs_resource_type', table_name='audit_logs')
|
|
op.drop_index('ix_audit_logs_action', table_name='audit_logs')
|
|
op.drop_index('ix_audit_logs_user_id', table_name='audit_logs')
|
|
op.drop_table('audit_logs')
|