Malin/domnitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add isolation checks and logging for domains and groups

Browse Source 
Implemented validation to restrict domain assignment to notification groups owned by the user when isolation mode is enabled. Added logging for domain creation, bulk domain addition, and notification group creation, update, and deletion to improve auditability and traceability.
This commit is contained in:
Hosteroid
2025-10-20 19:02:56 +03:00
parent 5727911656
commit a1211ae815
2 changed files with 123 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
app/Controllers/NotificationGroupController.php
View File

@@ -104,6 +104,15 @@ class NotificationGroupController extends Controller
$id = $this->groupModel->create($groupData);
// Log group creation
$logger = new \App\Services\Logger();
$logger->info('Notification group created', [
'group_id' => $id,
'group_name' => $name,
'user_id' => $userId,
'isolation_mode' => $isolationMode
]);
$_SESSION['success'] = "Group '$name' created successfully";
$this->redirect("/groups/edit?id=$id");
} catch (\Exception $e) {
@@ -174,6 +183,14 @@ class NotificationGroupController extends Controller
'description' => $description
]);
// Log group update
$logger = new \App\Services\Logger();
$logger->info('Notification group updated', [
'group_id' => $id,
'group_name' => $name,
'user_id' => \Core\Auth::id()
]);
$_SESSION['success'] = 'Group updated successfully';
$this->redirect("/groups/edit?id=$id");
} catch (\Exception $e) {
@@ -198,6 +215,14 @@ class NotificationGroupController extends Controller
}
try {
// Log group deletion
$logger = new \App\Services\Logger();
$logger->info('Notification group deleted', [
'group_id' => $id,
'group_name' => $group['name'],
'user_id' => \Core\Auth::id()
]);
$this->groupModel->deleteWithRelations($id);
$_SESSION['success'] = 'Group deleted successfully';
$this->redirect('/groups');