Releases

• Admin > Modules now shows Configure next to AuditTrail. The settings were only reachable from the Settings button on the Audit Trail page.

• Editors and other roles below Supervisor who open an Audit Trail page (the log, an entry or an export) now get Omeka's Forbidden page with HTTP status 403. They used to get Omeka's error page Omeka S encountered an error with status 500. Who may view, export and purge the log is unchanged.
• The Recent Activity widget on the dashboard and the Audit History panel on user pages no longer link roles that cannot open the log to it: for them the View full log button is hidden and entry times are plain text. The widget and the panel are still shown to them.
• Supervisors no longer see the Retention Purge section on the log page. Its button refused them (only Global Administrators may purge), and the purge address now answers them with the Forbidden page.

• Delete entries recorded an empty resource ID (Doctrine has cleared a deleted resource's ID by the time it is logged). They now record the ID, and no longer link to the deleted resource's page, which is gone.
• Deleted media were logged with no ID, and media without a file (HTML and similar) with no label. The ID is now noted just before the delete, and a media's title is used when it has no source filename. A media deleted together with its item no longer links to that item.
• Links to sites (/admin/site/<id>), assets (/admin/asset/<id>) and vocabularies (/admin/vocabulary/<id>) led to "page not found". Sites now link to /admin/site/s/<slug>, assets to their edit page and vocabularies to their properties. Upgrading corrects the links already stored, and removes those of earlier delete entries.
• Entries recorded in the same second were listed oldest first inside the newest-first log, dashboard widget, user history and exports. They now follow the same newest-first order.
• Settings: the Events to log checkboxes no longer break a label over two lines ("Resource" / "templates").
• PHP 8.4: no more deprecation notices for implicitly nullable $options parameters in the service factories.

Initial release.

• Records create, update and delete operations on items, media, item sets, users, sites, site pages, vocabularies, resource templates and assets, with the acting user, IP address and user agent for each entry.
• Records user logins and logouts.
• Media changes made while editing an item (uploads, edits and removals) are captured through entity events, so they are logged even though the item form does not call the media API directly.
• Activity log at /admin/audit with filters for action, actor, resource type and date range, pagination, and a detail page for every entry.
• Export the filtered log to CSV or JSON (up to 10,000 rows).
• Recent Activity widget on the admin dashboard showing the latest ten events.
• Audit History panel on each user's admin page, with its own action and date filters and pagination.
• Module settings: master enable switch, entries per page, retention period, IP address redaction, and a checklist of resource types to log.
• Retention purge as a background job queued from the log page (global administrators only) or from the bin/purge-audit-log.php CLI script for cron, with --days, --dry-run and --quiet options.