mirror of
https://github.com/nextcloud/server.git
synced 2026-11-03 21:12:20 +01:00
Ghassen kefi
9883a71e8a
The unified sharing API (behind sharing.unified_api_enable) changed shares, their sources, recipients, permissions, properties and recipient secrets without any audit entry. SharingManager now writes one entry per change, with unified_sharing.* operations, so they can be told apart from the legacy sharing.share.* entries, which carry different parameters. Recipient secrets (the public link token) and property values are never logged. Assisted-by: ClaudeCode:claude-opus-5-5 Signed-off-by: Ghassen kefi <ghassen.kefi.dev@gmail.com>
94 lines
3.8 KiB
PHP
94 lines
3.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
/**
|
|
* SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
|
|
* SPDX-License-Identifier: AGPL-3.0-or-later
|
|
*/
|
|
|
|
namespace OCA\AdminAudit;
|
|
|
|
/**
|
|
* Stable identifiers of the audited actions, written to the `operation` field of each audit log entry.
|
|
*
|
|
* The values are matched by log consumers (filters, alert rules, retention policies),
|
|
* so changing one is a breaking change for them.
|
|
*/
|
|
enum Operation: string {
|
|
// Files
|
|
case FileRead = 'files.file.read';
|
|
case FileCreated = 'files.file.created';
|
|
case FileWritten = 'files.file.written';
|
|
case FileRenamed = 'files.file.renamed';
|
|
case FileCopied = 'files.file.copied';
|
|
case FileDeleted = 'files.file.deleted';
|
|
case PreviewAccessed = 'files.preview.accessed';
|
|
case CacheEntryInserted = 'files.cache_entry.inserted';
|
|
case CacheEntryRemoved = 'files.cache_entry.removed';
|
|
|
|
// Sharing
|
|
case ShareCreated = 'sharing.share.created';
|
|
case ShareDeleted = 'sharing.share.deleted';
|
|
case SharePermissionsUpdated = 'sharing.share.permissions_updated';
|
|
case SharePasswordUpdated = 'sharing.share.password_updated';
|
|
case ShareExpirationUpdated = 'sharing.share.expiration_updated';
|
|
case ShareExpirationRemoved = 'sharing.share.expiration_removed';
|
|
case ShareLinkAccessed = 'sharing.share.link_accessed';
|
|
|
|
// Unified sharing API
|
|
// TODO: Merge with the legacy sharing.share.* operations above once the legacy sharing API is removed
|
|
case UnifiedShareCreated = 'unified_sharing.share.created';
|
|
case UnifiedShareDeleted = 'unified_sharing.share.deleted';
|
|
case UnifiedShareStateUpdated = 'unified_sharing.share.state_updated';
|
|
case UnifiedShareUserStatusUpdated = 'unified_sharing.share.user_status_updated';
|
|
case UnifiedShareSourceAdded = 'unified_sharing.source.added';
|
|
case UnifiedShareSourceRemoved = 'unified_sharing.source.removed';
|
|
case UnifiedShareRecipientAdded = 'unified_sharing.recipient.added';
|
|
case UnifiedShareRecipientRemoved = 'unified_sharing.recipient.removed';
|
|
case UnifiedShareRecipientSecretUpdated = 'unified_sharing.recipient_secret.updated';
|
|
case UnifiedSharePropertyUpdated = 'unified_sharing.property.updated';
|
|
case UnifiedSharePermissionUpdated = 'unified_sharing.permission.updated';
|
|
case UnifiedShareRecipientPermissionUpdated = 'unified_sharing.recipient_permission.updated';
|
|
case UnifiedSharePermissionPresetSelected = 'unified_sharing.permission_preset.selected';
|
|
|
|
// Trash bin and versions
|
|
case TrashbinFileDeleted = 'trashbin.file.deleted';
|
|
case TrashbinFileRestored = 'trashbin.file.restored';
|
|
case VersionDeleted = 'versions.version.deleted';
|
|
case VersionRestored = 'versions.version.restored';
|
|
|
|
// Authentication
|
|
case LoginAttempted = 'auth.login.attempted';
|
|
case LoginSucceeded = 'auth.login.succeeded';
|
|
case LoginFailed = 'auth.login.failed';
|
|
case LogoutPerformed = 'auth.logout.performed';
|
|
case TwoFactorPassed = 'auth.twofactor.passed';
|
|
case TwoFactorFailed = 'auth.twofactor.failed';
|
|
case PasswordResetRequested = 'auth.password_reset.requested';
|
|
case RemoteWipeFinished = 'auth.remote_wipe.finished';
|
|
|
|
// Users
|
|
case UserCreated = 'users.user.created';
|
|
case UserDeleted = 'users.user.deleted';
|
|
case UserEnabled = 'users.user.enabled';
|
|
case UserDisabled = 'users.user.disabled';
|
|
case UserEmailChanged = 'users.user.email_changed';
|
|
case UserPasswordChanged = 'users.user.password_changed';
|
|
case UserIdAssigned = 'users.user.id_assigned';
|
|
case UserIdUnassigned = 'users.user.id_unassigned';
|
|
|
|
// Groups
|
|
case GroupCreated = 'groups.group.created';
|
|
case GroupDeleted = 'groups.group.deleted';
|
|
case GroupMemberAdded = 'groups.member.added';
|
|
case GroupMemberRemoved = 'groups.member.removed';
|
|
|
|
// Apps, console and system tags
|
|
case AppEnabled = 'apps.app.enabled';
|
|
case AppDisabled = 'apps.app.disabled';
|
|
case AppUpdated = 'apps.app.updated';
|
|
case ConsoleCommandExecuted = 'console.command.executed';
|
|
case SystemTagCreated = 'systemtags.tag.created';
|
|
}
|