View and Audit Activity Logs for Compliance
The activity log viewer presents a searchable, filterable list of audit events scoped to the admin's organisation. Events include activity registrations (with actor, timestamp, and linked contact), role assignments, expense claim state transitions, proxy registrations, and Bufdir export runs. Filters allow narrowing by event type, date range, actor, and affected user. The log is read-only; no entries can be modified or deleted. Logs are stored with row-level security ensuring no cross-organisation data exposure.
User Story
Acceptance Criteria
- Given I open the activity log viewer, when the log loads, then I see a paginated list of events sorted newest-first with actor name, event type, timestamp, and a summary
- Given I filter by event type 'proxy_registration', when results are displayed, then only proxy registration events appear and each entry shows the coordinator who registered on behalf of whom
- Given I search for a specific peer mentor by name, when results return, then only events involving that person as actor or subject are shown
- Given I tap an event entry, when the detail view opens, then I see the full audit payload including before/after values for change events
- Given more than 90 days of logs exist, when I attempt to view logs older than 90 days, then I am informed of the retention policy and offered an export option for archived data
- Given I am a regional admin, when I view the log, then I only see events originating from chapters within my scope — no other organisation's events are visible
Business Value
Bufdir grant audits require organisations to demonstrate that reported activities actually occurred and were registered by qualified peer mentors. Without an accessible audit trail, coordinators spend hours manually reconstructing evidence from emails and spreadsheets. A built-in audit log reduces audit preparation time from days to minutes and provides the evidentiary foundation needed to defend reported figures, directly protecting funding streams that organisations depend on for operations.
Components
- Activity Log Viewer ui
- Admin Row-Level Security Guard service
- Admin Data Repository data
- Admin Portal BLoC data
- Supabase RLS Policy Configuration infrastructure
- Admin Statistics Service service