Skip to content

Backend: Define audit log retention and export #1204

Description

@Cedarich

Complexity: Medium (150)

Description
apps/backend/src/audit/ and apps/backend/src/admin-audit/ write audit records through interceptors with no retention policy and no export path. The tables grow without bound, and there is no way to hand an auditor a scoped extract.

Acceptance Criteria

  • A documented retention window applies per audit record type.
  • A scheduled job archives or purges records beyond the window.
  • An admin-only export endpoint produces a filtered extract by date range and actor.
  • Export runs are themselves audited.
  • Purge and archive operations are covered by tests, including the boundary at the retention edge.

Wave 8 · source: backend.md

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

BackendStellar WaveIssues in the Stellar wave programadminAdmin and reviewer toolingdatabaseDatabase operationsexportsData export featuresnestjsNestJS frameworksecuritySecurity-related issues

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions