FlexMeasures / flexmeasures / 36123840679

86%

push

github

Fix: account creation in UI now makes auditlog entry (#2580)

* data/services: centralize audited account creation

Context:
- Account creation through the UI/API omitted its audit record
- CLI and implicit user creation duplicated account audit logic

Change:
- Route runtime account creation through one service
- Preserve API, CLI, and user-creation context in audit events

* tests/accounts: cover creation audit context

Context:
- Account creation audit coverage did not span API, CLI, and implicit user creation

Change:
- Assert affected account, actor, and creation context for each path

* docs/changelog: note account creation audit records

Context:
- Organisation creation was not consistently visible in audit logs

Change:
- Document audited organisation creation across UI, API, and CLI

* add PR Nr

Signed-off-by: Nicolas Höning <nicolas@seita.nl>

* api/accounts: retain UI client creation context

Context:
- API provenance alone did not distinguish creation from the UI
- Client organisation creation did not identify its consultancy

Change:
- Mark account creation requests from the known UI page
- Include the consultancy identity for directly created clients

* tests/accounts: cover UI client creation context

Context:
- Client creation audit events now distinguish the UI page and consultancy

Change:
- Assert both details on an authenticated account creation request

* Update documentation/changelog.rst

Signed-off-by: Felix Claessen <30658763+Flix6x@users.noreply.github.com>

* api/accounts: defer UI provenance context

* tests/accounts: keep client consultancy audit coverage

---------

Signed-off-by: Nicolas Höning <nicolas@seita.nl>
Signed-off-by: Felix Claessen <30658763+Flix6x@users.noreply.github.com>
Co-authored-by: Felix Claessen <30658763+Flix6x@users.noreply.github.com>

24 of 24 new or added lines in 4 files covered. (100.0%)

19650 of 22865 relevant lines covered (85.94%)

0.86 hits per line