Log event creation to admin audit log, add back button, bump to 1.10.3 #3

2026-08-28T14:44:49+02:00

joshua commented

2026-08-28 14:44:49 +02:00

Summary

createEvent never called logAdminAction, even though the frontend's audit-log page (shipped in 1.10.0) already lists event_created as a filterable action — only updateEvent/deleteEvent actually logged. Event creation is now logged at every return path, including the legacy pre-migration retry branches.
Added a "Back to dashboard" link to Admin → Audit log, matching the existing back-link pattern used on the Cashup page.
Version bumped to 1.10.3.

Test plan

Backend Jest suite (21 tests) passes
Reviewed the diff against the existing event_updated/event_deleted logging pattern for consistency

Note: this doesn't backfill audit entries for events created before this fix — only new events going forward will show up.

https://claude.ai/code/session_01CSWFWQsjTc9GyffPiXEDQT

## Summary - `createEvent` never called `logAdminAction`, even though the frontend's audit-log page (shipped in 1.10.0) already lists `event_created` as a filterable action — only `updateEvent`/`deleteEvent` actually logged. Event creation is now logged at every return path, including the legacy pre-migration retry branches. - Added a "Back to dashboard" link to Admin → Audit log, matching the existing back-link pattern used on the Cashup page. - Version bumped to 1.10.3. ## Test plan - [x] Backend Jest suite (21 tests) passes - [x] Reviewed the diff against the existing `event_updated`/`event_deleted` logging pattern for consistency Note: this doesn't backfill audit entries for events created before this fix — only new events going forward will show up. https://claude.ai/code/session_01CSWFWQsjTc9GyffPiXEDQT

joshua added 1 commit 2026-08-28 14:44:50 +02:00

Log event creation to admin audit log, add back button, bump to 1.10.3 af6dffe534

createEvent never called logAdminAction, even though 1.10.0 already
listed event_created as a filterable action on the audit-log page —
only updateEvent/deleteEvent actually logged. Event creation is now
logged the same way, at every return path including the legacy
pre-migration retry branches.

Also adds a "Back to dashboard" link to Admin -> Audit log, matching
the existing back-link pattern on the Cashup page.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CSWFWQsjTc9GyffPiXEDQT

joshua added 1 commit 2026-08-28 14:48:23 +02:00

Also log staff cancellations via PUT /api/registrations/:id 5b2183677d

Registrations can be cancelled two ways: DELETE /:id (owner or admin,
already logged registration_cancelled) and PUT /:id (staff+, status
change endpoint) — the latter was silently unlogged. Since PUT /:id
is staff-only, any transition into 'cancelled' there is inherently a
staff-initiated cancellation, so it's now logged the same way.

Audited all six categories promised in the 1.10.0 changelog entry
(refunds, donation assign/unassign, manual registrations,
staff-initiated cancellations, event create/update/delete, settings
changes) against their actual logAdminAction call sites and route
wiring — this was the only other gap found.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CSWFWQsjTc9GyffPiXEDQT

joshua merged commit 97faff1c89 into main

2026-08-28 14:49:25 +02:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: joshua/hope-events#3