1. class
  2. Poweradmin
  3. \
  4. Application
  5. \
  6. Service
  7. \
  8. AuditService

AuditService

class AuditService (View source)

Writes the "client_ip:.. user:.. operation:.." audit lines. Every line starts with the same actor context; one method per event keeps the field names in one place.

Methods

__construct(PDO $db, LegacyLogger|null $logger = null, IpAddressRetriever|null $ipRetriever = null, UserContextService|null $userContext = null)

No description

void
logPermTemplateChange(string $targetUser, int $oldTemplateId, int $newTemplateId)

No description

void
logSessionExpired()

No description

void
logAccessDenied(string $permission, string $requestUri)

No description

void
logUserAdd(string $username, string $email)

No description

void
logUserEdit(string $targetUser, int $permTemplateId, string $authType)

No description

void
logUserDelete(string $targetUser)

No description

void
logPasswordChange()

No description

void
logLogout()

No description

void
logPasswordResetRequest(string $email)

No description

void
logPasswordReset(int $userId)

No description

void
logUsernameRecovery(string $email)

No description

void
logMfaEnable(string $mfaType)

No description

void
logMfaDisable()

No description

void
logMfaRecoveryCodesRegenerate()

No description

void
logMfaVerify(string $mfaType)

No description

void
logMfaFailed(string $mfaType)

No description

void
logSsoLoginError(string $authMethod, string $error)

An identity-provider handshake error. Logged as login_error, not login_failed, so it does not feed fail2ban brute-force counters.

void
logSsoLoginSuccess(string $authMethod)

No description

void
logSamlLogout(string|null $username)

No description

void
logApiKeyCreate(int $keyId, string $keyName)

No description

void
logApiKeyEdit(int $keyId, string $keyName)

No description

void
logApiKeyDelete(int $keyId, string $keyName)

No description

void
logApiKeyRegenerate(int $keyId, string $keyName)

No description

void
logApiKeyToggle(int $keyId, string $keyName, bool $disabled)

No description

void
logPermTemplateAdd(string $name)

No description

void
logPermTemplateEdit(int $templateId, string $name)

No description

void
logPermTemplateDelete(int $templateId, string $name)

No description

void
logZoneAdd(int $zoneId, string $zoneName, string $zoneType, string|null $template = null, string|null $master = null)

No description

void
logZoneDelete(int $zoneId, string $zoneName, string $zoneType)

No description

void
logZoneImport(int $zoneId, string $zoneName, bool $intoExistingZone)

A zone file import: a new zone or records added to an existing one.

void
logSecondaryZoneImport(int $zoneId, string $zoneName, string $master)

No description

void
logApiZoneAdd(int $zoneId, string $zoneName, string $zoneType)

No description

void
logApiZoneDelete(int $zoneId, string $zoneName)

No description

void
logRecordAdd(int $zoneId, string $type, string $name, string $content, int|string $ttl, int|string $prio)

No description

void
logRecordEdit(int|null $zoneId, array $before, array $after)

No description

void
logRecordDelete(int $zoneId, string $type, string $name, string $content, int|string $ttl, int|string|null $prio)

No description

void
logBatchPtrRecordAdd(int $zoneId, string $name, string $content, int|string $ttl, int|string $prio)

No description

void
logRecordTypeDefaultSave(string $type, int $ttl)

No description

void
logRecordTypeDefaultDelete(string $type)

No description

void
logApiRecordAdd(int $zoneId, string $name, string $type, string $content)

No description

void
logApiRecordEdit(int $zoneId, string $name, string $type, string $content)

No description

void
logApiRecordDelete(int $zoneId, string $name, string $type, string $content)

No description

void
logApiRrsetReplace(int $zoneId, string $name, string $type, int $records)

No description

void
logApiRrsetDelete(int $zoneId, string $name, string $type, int $records)

No description

void
logApiBulkRecords(int $zoneId, int $operations)

No description

void
logZoneCatalogAssign(int $zoneId, string $zoneName, string $catalog)

Logged against the member zone: that is the zone whose stored catalog changed.

void
logZoneCatalogClear(int $zoneId, string $zoneName, string $catalog)

No description

void
logZoneOwnerAdd(int $zoneId, string $zoneName, int $ownerId)

No description

void
logZoneOwnerRemove(int $zoneId, string $zoneName, int $ownerId)

No description

void
logZoneGroupAdd(int $zoneId, string $zoneName, int $groupId)

No description

void
logZoneGroupRemove(int $zoneId, string $zoneName, int $groupId)

No description

void
logDnssecAddKey(int $zoneId, string $zoneName, string $keyType, string $bits, string $algorithm)

No description

void
logDnssecDeleteKey(int $zoneId, string $zoneName, int $keyId)

No description

void
logDnssecToggleKey(int $zoneId, string $zoneName, int $keyId, string $action)

No description

void
logZoneMetadataEdit(int $zoneId, string $zoneName, array $kinds)

No description

void
logDnssecSignZone(int $zoneId, string $zoneName)

No description

void
logDnssecUnsignZone(int $zoneId, string $zoneName)

No description

void
logGroupCreate(int $groupId, string $groupName, string $templateName, int $templateId)

No description

void
logGroupEdit(int $groupId, string $groupName, array $changes)

No description

void
logGroupDelete(int $groupId, string $groupName, int $membersAffected, int $zonesAffected)

Written to the general log: the group row is gone, so there is nothing to attach it to.

void
logGroupMembersAdd(int $groupId, string $groupName, array $usernames)

No description

void
logGroupMembersRemove(int $groupId, string $groupName, array $usernames)

No description

void
logApiGroupMemberAdd(int $groupId, string $groupName, string $username)

No description

void
logGroupZonesAdd(int $groupId, string $groupName, array $zoneNames)

No description

void
logGroupZonesRemove(int $groupId, string $groupName, array $zoneNames)

No description

void
logGroupMemberRemove(int $groupId, int $userId)

No description

void
logZoneTemplateAdd(string $templateName)

No description

void
logZoneTemplateEdit(int $templateId, string $templateName)

No description

void
logZoneTemplateDelete(int $templateId)

No description

void
logZoneTemplateUnlink(int $zoneId)

No description

void
logZoneTemplateRecordAdd(int $templateId, string $recordName, string $recordType)

No description

void
logZoneTemplateRecordEdit(int $templateId, int $recordId, string $recordName, string $recordType)

No description

void
logZoneTemplateRecordDelete(int $templateId, int $recordId)

No description

void
logApiZoneTemplateAdd(int $templateId, string $templateName)

No description

void
logApiZoneTemplateEdit(int $templateId, string $templateName)

No description

void
logApiZoneTemplateDelete(int $templateId)

No description

void
logApiZoneTemplateRecordAdd(int $templateId, int $recordId, string $recordName, string $recordType)

No description

void
logApiZoneTemplateRecordEdit(int $templateId, int $recordId, string $recordName, string $recordType)

No description

void
logApiZoneTemplateRecordDelete(int $templateId, int $recordId)

No description

void
logZoneCommentEdit(int $zoneId, string $zoneName)

No description

void
logSupermasterAdd(string $masterIp, string $nsName)

No description

void
logSupermasterEdit(string $oldMasterIp, string $oldNsName, string $newMasterIp, string $newNsName)

No description

void
logSupermasterDelete(string $masterIp, string $nsName)

No description

Details

at line 41
__construct(PDO $db, LegacyLogger|null $logger = null, IpAddressRetriever|null $ipRetriever = null, UserContextService|null $userContext = null)

No description

Parameters

PDO $db
LegacyLogger|null $logger
IpAddressRetriever|null $ipRetriever
UserContextService|null $userContext

at line 112
void logPermTemplateChange(string $targetUser, int $oldTemplateId, int $newTemplateId)

No description

Parameters

string $targetUser
int $oldTemplateId
int $newTemplateId

Return Value

void

at line 121
void logSessionExpired()

No description

Return Value

void

at line 126
void logAccessDenied(string $permission, string $requestUri)

No description

Parameters

string $permission
string $requestUri

Return Value

void

at line 133
void logUserAdd(string $username, string $email)

No description

Parameters

string $username
string $email

Return Value

void

at line 138
void logUserEdit(string $targetUser, int $permTemplateId, string $authType)

No description

Parameters

string $targetUser
int $permTemplateId
string $authType

Return Value

void

at line 147
void logUserDelete(string $targetUser)

No description

Parameters

string $targetUser

Return Value

void

at line 152
void logPasswordChange()

No description

Return Value

void

at line 157
void logLogout()

No description

Return Value

void

at line 162
void logPasswordResetRequest(string $email)

No description

Parameters

string $email

Return Value

void

at line 167
void logPasswordReset(int $userId)

No description

Parameters

int $userId

Return Value

void

at line 172
void logUsernameRecovery(string $email)

No description

Parameters

string $email

Return Value

void

at line 179
void logMfaEnable(string $mfaType)

No description

Parameters

string $mfaType

Return Value

void

at line 184
void logMfaDisable()

No description

Return Value

void

at line 189
void logMfaRecoveryCodesRegenerate()

No description

Return Value

void

at line 194
void logMfaVerify(string $mfaType)

No description

Parameters

string $mfaType

Return Value

void

at line 199
void logMfaFailed(string $mfaType)

No description

Parameters

string $mfaType

Return Value

void

at line 208
void logSsoLoginError(string $authMethod, string $error)

An identity-provider handshake error. Logged as login_error, not login_failed, so it does not feed fail2ban brute-force counters.

Parameters

string $authMethod
string $error

Return Value

void

at line 213
void logSsoLoginSuccess(string $authMethod)

No description

Parameters

string $authMethod

Return Value

void

at line 221
void logSamlLogout(string|null $username)

No description

Parameters

string|null $username

Captured before SLO processing, which clears the session

Return Value

void

at line 228
void logApiKeyCreate(int $keyId, string $keyName)

No description

Parameters

int $keyId
string $keyName

Return Value

void

at line 233
void logApiKeyEdit(int $keyId, string $keyName)

No description

Parameters

int $keyId
string $keyName

Return Value

void

at line 238
void logApiKeyDelete(int $keyId, string $keyName)

No description

Parameters

int $keyId
string $keyName

Return Value

void

at line 243
void logApiKeyRegenerate(int $keyId, string $keyName)

No description

Parameters

int $keyId
string $keyName

Return Value

void

at line 248
void logApiKeyToggle(int $keyId, string $keyName, bool $disabled)

No description

Parameters

int $keyId
string $keyName
bool $disabled

Return Value

void

at line 261
void logPermTemplateAdd(string $name)

No description

Parameters

string $name

Return Value

void

at line 266
void logPermTemplateEdit(int $templateId, string $name)

No description

Parameters

int $templateId
string $name

Return Value

void

at line 271
void logPermTemplateDelete(int $templateId, string $name)

No description

Parameters

int $templateId
string $name

Return Value

void

at line 278
void logZoneAdd(int $zoneId, string $zoneName, string $zoneType, string|null $template = null, string|null $master = null)

No description

Parameters

int $zoneId
string $zoneName
string $zoneType
string|null $template
string|null $master

Return Value

void

at line 288
void logZoneDelete(int $zoneId, string $zoneName, string $zoneType)

No description

Parameters

int $zoneId
string $zoneName
string $zoneType

Return Value

void

at line 296
void logZoneImport(int $zoneId, string $zoneName, bool $intoExistingZone)

A zone file import: a new zone or records added to an existing one.

Parameters

int $zoneId
string $zoneName
bool $intoExistingZone

Return Value

void

at line 302
void logSecondaryZoneImport(int $zoneId, string $zoneName, string $master)

No description

Parameters

int $zoneId
string $zoneName
string $master

Return Value

void

at line 307
void logApiZoneAdd(int $zoneId, string $zoneName, string $zoneType)

No description

Parameters

int $zoneId
string $zoneName
string $zoneType

Return Value

void

at line 312
void logApiZoneDelete(int $zoneId, string $zoneName)

No description

Parameters

int $zoneId
string $zoneName

Return Value

void

at line 319
void logRecordAdd(int $zoneId, string $type, string $name, string $content, int|string $ttl, int|string $prio)

No description

Parameters

int $zoneId
string $type
string $name
string $content
int|string $ttl
int|string $prio

Return Value

void

at line 334
void logRecordEdit(int|null $zoneId, array $before, array $after)

No description

Parameters

int|null $zoneId
array $before

Record row before the edit (type, name, content, ttl, prio)
array $after

Record row after the edit

Return Value

void

at line 350
void logRecordDelete(int $zoneId, string $type, string $name, string $content, int|string $ttl, int|string|null $prio)

No description

Parameters

int $zoneId
string $type
string $name
string $content
int|string $ttl
int|string|null $prio

Return Value

void

at line 361
void logBatchPtrRecordAdd(int $zoneId, string $name, string $content, int|string $ttl, int|string $prio)

No description

Parameters

int $zoneId
string $name
string $content
int|string $ttl
int|string $prio

Return Value

void

at line 372
void logRecordTypeDefaultSave(string $type, int $ttl)

No description

Parameters

string $type
int $ttl

Return Value

void

at line 377
void logRecordTypeDefaultDelete(string $type)

No description

Parameters

string $type

Return Value

void

at line 382
void logApiRecordAdd(int $zoneId, string $name, string $type, string $content)

No description

Parameters

int $zoneId
string $name
string $type
string $content

Return Value

void

at line 387
void logApiRecordEdit(int $zoneId, string $name, string $type, string $content)

No description

Parameters

int $zoneId
string $name
string $type
string $content

Return Value

void

at line 392
void logApiRecordDelete(int $zoneId, string $name, string $type, string $content)

No description

Parameters

int $zoneId
string $name
string $type
string $content

Return Value

void

at line 397
void logApiRrsetReplace(int $zoneId, string $name, string $type, int $records)

No description

Parameters

int $zoneId
string $name
string $type
int $records

Return Value

void

at line 402
void logApiRrsetDelete(int $zoneId, string $name, string $type, int $records)

No description

Parameters

int $zoneId
string $name
string $type
int $records

Return Value

void

at line 407
void logApiBulkRecords(int $zoneId, int $operations)

No description

Parameters

int $zoneId
int $operations

Return Value

void

at line 417
void logZoneCatalogAssign(int $zoneId, string $zoneName, string $catalog)

Logged against the member zone: that is the zone whose stored catalog changed.

Parameters

int $zoneId
string $zoneName
string $catalog

Return Value

void

at line 422
void logZoneCatalogClear(int $zoneId, string $zoneName, string $catalog)

No description

Parameters

int $zoneId
string $zoneName
string $catalog

Return Value

void

at line 427
void logZoneOwnerAdd(int $zoneId, string $zoneName, int $ownerId)

No description

Parameters

int $zoneId
string $zoneName
int $ownerId

Return Value

void

at line 432
void logZoneOwnerRemove(int $zoneId, string $zoneName, int $ownerId)

No description

Parameters

int $zoneId
string $zoneName
int $ownerId

Return Value

void

at line 437
void logZoneGroupAdd(int $zoneId, string $zoneName, int $groupId)

No description

Parameters

int $zoneId
string $zoneName
int $groupId

Return Value

void

at line 442
void logZoneGroupRemove(int $zoneId, string $zoneName, int $groupId)

No description

Parameters

int $zoneId
string $zoneName
int $groupId

Return Value

void

at line 449
void logDnssecAddKey(int $zoneId, string $zoneName, string $keyType, string $bits, string $algorithm)

No description

Parameters

int $zoneId
string $zoneName
string $keyType
string $bits
string $algorithm

Return Value

void

at line 459
void logDnssecDeleteKey(int $zoneId, string $zoneName, int $keyId)

No description

Parameters

int $zoneId
string $zoneName
int $keyId

Return Value

void

at line 464
void logDnssecToggleKey(int $zoneId, string $zoneName, int $keyId, string $action)

No description

Parameters

int $zoneId
string $zoneName
int $keyId
string $action

Return Value

void

at line 472
void logZoneMetadataEdit(int $zoneId, string $zoneName, array $kinds)

No description

Parameters

int $zoneId
string $zoneName
array $kinds

The kinds the zone carries after the edit

Return Value

void

at line 477
void logDnssecSignZone(int $zoneId, string $zoneName)

No description

Parameters

int $zoneId
string $zoneName

Return Value

void

at line 482
void logDnssecUnsignZone(int $zoneId, string $zoneName)

No description

Parameters

int $zoneId
string $zoneName

Return Value

void

at line 489
void logGroupCreate(int $groupId, string $groupName, string $templateName, int $templateId)

No description

Parameters

int $groupId
string $groupName
string $templateName
int $templateId

Return Value

void

at line 502
void logGroupEdit(int $groupId, string $groupName, array $changes)

No description

Parameters

int $groupId
string $groupName
array $changes

Human-readable "field: old -> new" entries

Return Value

void

at line 514
void logGroupDelete(int $groupId, string $groupName, int $membersAffected, int $zonesAffected)

Written to the general log: the group row is gone, so there is nothing to attach it to.

Parameters

int $groupId
string $groupName
int $membersAffected
int $zonesAffected

Return Value

void

at line 525
void logGroupMembersAdd(int $groupId, string $groupName, array $usernames)

No description

Parameters

int $groupId
string $groupName
array $usernames

Return Value

void

at line 531
void logGroupMembersRemove(int $groupId, string $groupName, array $usernames)

No description

Parameters

int $groupId
string $groupName
array $usernames

Return Value

void

at line 536
void logApiGroupMemberAdd(int $groupId, string $groupName, string $username)

No description

Parameters

int $groupId
string $groupName
string $username

Return Value

void

at line 542
void logGroupZonesAdd(int $groupId, string $groupName, array $zoneNames)

No description

Parameters

int $groupId
string $groupName
array $zoneNames

Return Value

void

at line 548
void logGroupZonesRemove(int $groupId, string $groupName, array $zoneNames)

No description

Parameters

int $groupId
string $groupName
array $zoneNames

Return Value

void

at line 553
void logGroupMemberRemove(int $groupId, int $userId)

No description

Parameters

int $groupId
int $userId

Return Value

void

at line 571
void logZoneTemplateAdd(string $templateName)

No description

Parameters

string $templateName

Return Value

void

at line 576
void logZoneTemplateEdit(int $templateId, string $templateName)

No description

Parameters

int $templateId
string $templateName

Return Value

void

at line 584
void logZoneTemplateDelete(int $templateId)

No description

Parameters

int $templateId

Return Value

void

No description

Parameters

int $zoneId

Return Value

void

at line 596
void logZoneTemplateRecordAdd(int $templateId, string $recordName, string $recordType)

No description

Parameters

int $templateId
string $recordName
string $recordType

Return Value

void

at line 605
void logZoneTemplateRecordEdit(int $templateId, int $recordId, string $recordName, string $recordType)

No description

Parameters

int $templateId
int $recordId
string $recordName
string $recordType

Return Value

void

at line 615
void logZoneTemplateRecordDelete(int $templateId, int $recordId)

No description

Parameters

int $templateId
int $recordId

Return Value

void

at line 620
void logApiZoneTemplateAdd(int $templateId, string $templateName)

No description

Parameters

int $templateId
string $templateName

Return Value

void

at line 628
void logApiZoneTemplateEdit(int $templateId, string $templateName)

No description

Parameters

int $templateId
string $templateName

Return Value

void

at line 636
void logApiZoneTemplateDelete(int $templateId)

No description

Parameters

int $templateId

Return Value

void

at line 641
void logApiZoneTemplateRecordAdd(int $templateId, int $recordId, string $recordName, string $recordType)

No description

Parameters

int $templateId
int $recordId
string $recordName
string $recordType

Return Value

void

at line 651
void logApiZoneTemplateRecordEdit(int $templateId, int $recordId, string $recordName, string $recordType)

No description

Parameters

int $templateId
int $recordId
string $recordName
string $recordType

Return Value

void

at line 661
void logApiZoneTemplateRecordDelete(int $templateId, int $recordId)

No description

Parameters

int $templateId
int $recordId

Return Value

void

at line 668
void logZoneCommentEdit(int $zoneId, string $zoneName)

No description

Parameters

int $zoneId
string $zoneName

Return Value

void

at line 675
void logSupermasterAdd(string $masterIp, string $nsName)

No description

Parameters

string $masterIp
string $nsName

Return Value

void

at line 680
void logSupermasterEdit(string $oldMasterIp, string $oldNsName, string $newMasterIp, string $newNsName)

No description

Parameters

string $oldMasterIp
string $oldNsName
string $newMasterIp
string $newNsName

Return Value

void

at line 690
void logSupermasterDelete(string $masterIp, string $nsName)

No description

Parameters

string $masterIp
string $nsName

Return Value

void