Struct AdminAuditEntry

controlplane/admin/audit.go:19–37

AdminAuditEntry is one append-only record of an admin-UI action. Every mutation (config-store write, user/secret change) and every impersonation statement writes a row. SQL text is stored already-redacted by the caller — never store raw secret DDL here.

// mutation (config-store write, user/secret change) and every impersonation
// statement writes a row. SQL text is stored already-redacted by the caller —
// never store raw secret DDL here.
type AdminAuditEntry struct {
	ID          uint64    `gorm:"primaryKey;autoIncrement" json:"id"`
	Timestamp   time.Time `gorm:"index" json:"ts"`
	Actor       string    `gorm:"index" json:"actor"`  // SSO email or "internal-secret"
	Role        string    `json:"role"`                // viewer/admin
	Source      string    `json:"source"`              // sso / internal-secret
	Action      string    `gorm:"index" json:"action"` // e.g. "config.update", "impersonate.query"
	Method      string    `json:"method"`
	Path        string    `json:"path"`
	Org         string    `gorm:"index" json:"org"`
	TargetUser  string    `json:"target_user"`
	SQLRedacted string    `json:"sql_redacted"`
	// Detail is optional, non-sensitive human context for the action (e.g.
	// "role viewer → admin" for an operator change). Set by a handler via
	// requestaudit.SetDetail; NEVER put credentials or raw secret DDL here.
	Detail string `json:"detail"`
	// Outcome is an optional machine-readable durable result. It distinguishes
	// a mutation that landed before later response-path work failed from one
	// that never happened. It must never contain identifiers or secrets.
	Outcome    string `json:"outcome"`
	Status     int    `json:"status"`