Security & Access Audit Log
Filter Panel
Log List
File ready for download
| Date / Time | Category | Event Type | Actor | Detail | Device / IP |
|---|---|---|---|---|---|
| 2026-07-01 08:45 | Authentication | Login Activity | Somchai Laorungrueang | Logged in successfully. | web / 192.168.1.20 |
| 2026-06-30 16:22 | Authorization & Access | Permission Change | Wanchai Rattanachai | Role updated: Instructor → Course Reviewer for institution TVET Bangkok. | web / 203.154.12.44 |
| 2026-06-30 14:10 | Data & Content | Content Management | Malee Sriprasert | Course "Web Development Fundamentals" published. Version 1.0. | web / 10.0.0.5 |
| 2026-06-29 11:05 | Administration | User Management | Nattapon Chaiworaporn | New staff account created: john.doe@tvet.ac.th. Role: Instructor. Institution: TVET College Bangkok. | web / 172.16.0.8 |
| 2026-06-29 09:12 | Administration | System Configuration | Nattapon Chaiworaporn | System configuration updated: max_login_attempts changed from 5 to 3. | web / 172.16.0.8 |
| 2026-06-28 17:30 | Financial | Billing | Somchai Laorungrueang | Subscription invoice INV-2026-0628 issued for institution TVET Chiang Mai. Amount: 15,000 THB. | web / 192.168.1.20 |
| 2026-06-28 14:55 | Authentication | Login Activity | Malee Sriprasert | Logged out. Session duration: 2h 45m. | web / 10.0.0.5 |
| 2026-06-27 10:18 | Authorization & Access | Permission Change | Wanchai Rattanachai | Access denied: attempted to delete institution record without Super Administrator privilege. | web / 203.154.12.44 |
Screen Flow (UC-ADM.03):
📝 Spec notes — UC-ADM.03 / SCR-ADM.02 (fields, actions, requirements)
Identity
- Screen: SCR-ADM.02 — Audit Log
- Use case: UC-ADM.03 — View Security & Access Audit Log
Brief description
Displays system audit and activity logs for Super Administrator — accessible via the "Security Audit Log" menu in the back-office portal; web only. Covers both security-relevant actions and broader operational/content activity. Two main sections: (1) Filter Panel — date range, category, event type, actor; (2) Log List — audit log table with Export button. Default filter: last 30 days / all categories / all event types / all actors. Records cover all institutions in the system.
Fields
date_from"Start Date" — date · default: computed (today − 30 days)date_to"End Date" — date · default: computed (today)category_filter"Category" — enum · default: all · values: all, authentication, authorization_and_access, data_and_content, administration, financialevent_type"Event Type" — enum · default: all · values: all, login_activity, permission_change, content_management, user_management, system_configuration, billingactor_search"Actor" — text · search by namelog_created_at"Date / Time" — datetime · read-onlylog_category"Category" — text · read-onlylog_event_type"Event Type" — text · read-onlylog_actor"Actor" — text · read-only · shown as first + last namelog_detail"Detail" — text · read-only · human-readable sentence (no raw JSON)log_device_ip"Device / IP" — text · read-only
Actions
apply_filter"Filter" — enabled always · triggers UC-ADM.03-M-2clear_filters"Clear" — enabled when any filter is active · resets all filter fields to defaultsexport"Export" — enabled always · triggers UC-ADM.03-M-4 (CSV / PDF / Excel)
Additional requirements
- Each audit log entry must be rendered as human-readable text using the AuditLogType message template. Raw JSON or machine-readable event codes must not be exposed to the Super Administrator.
- The displayed audit logs must cover all institutions in the system and must not be limited to the Super Administrator's own institution.