zentralopensource / zentral / 32764814799

91%

push

github

santa: publish audit events from the enrollment API views

The Santa API created, updated and deleted an enrollment with no record of it.
The web console publishes a zentral_audit event for the same object.

The two views move to the ListCreateAPIViewWithAudit and the
RetrieveUpdateDestroyAPIViewWithAudit bases, which give the permission classes
and the filter backend. The perform_destroy that refuses to delete an enrollment
in use calls super(), so its check runs before the audit event. These endpoints
also answer a PATCH with a 405 now, because the bases accept only the full
updates.

The rules keep their API views. A rule change already publishes a
santa_rule_update event, and the rule sets publish one for each rule they
change, so an audit event there needs a decision and not a new base class.

The test of the update checks the version in the payload of the event, before and
after. BaseEnrollment.serialize_for_event() puts it there, and the assert_audit_event
helper compares the event with the same method, so only an explicit check finds a
payload that lost the attribute.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2 of 2 new or added lines in 1 file covered. (100.0%)

51284 of 56850 relevant lines covered (90.21%)

0.9 hits per line