Improve system logging to show complete audit history

Fixes version history filtering to show all historical changes by removing the `is_current` filter from relevant database queries. Aligns RLS policies for better log access and verifies chronological sorting of aggregated activities.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: 14a3da17-c084-4611-919e-f0651a496ef3
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/7cdf4e95-3f41-4180-b8e3-8ef56d032c0e/14a3da17-c084-4611-919e-f0651a496ef3/bS7Mx7U
This commit is contained in:
pac7
2025-10-27 23:20:17 +00:00
parent 46377152c3
commit 338c30e65c

View File

@@ -4,7 +4,19 @@
ThrillWiki is a community-driven web application for discovering, reviewing, and tracking theme parks, rides, and related entities globally. Its core purpose is to provide a centralized platform for enthusiasts to research attractions and contribute to a collaborative knowledge base through user contributions and reviews, offering a comprehensive encyclopedia for the theme park world.
## Recent Changes
**October 27, 2025 - Critical Build Fixes (Latest)**
**October 27, 2025 - System Logging Improvements (Latest)**
- **Complete Audit History**: Fixed version history filtering to show ALL historical changes, not just current versions
- Removed `is_current` filter from park, ride, company, and ride_model version queries
- System log now displays complete audit trail of all entity changes over time
- **RLS Policy Alignment**: Fixed authentication mismatch between frontend and database policies
- Relaxed admin_audit_log SELECT policy to allow moderators to view logs without AAL2 (MFA step-up)
- Maintained strict AAL2 requirement for INSERT operations to ensure high security for write operations
- Viewing logs is read-only and doesn't require the same security level as modifying data
- **Chronological Ordering**: Verified proper timestamp-based sorting of aggregated activities
- All activities from multiple sources are sorted by timestamp (newest first) after aggregation
- Ensures coherent, time-ordered display of system events
**October 27, 2025 - Critical Build Fixes**
- **Merge Conflict Resolution**: Resolved unresolved git merge conflict in AuthButtons.tsx that was preventing the app from compiling
- Removed conflict markers and kept the UserAvatar component implementation for consistency with recent avatar improvements
- Fixed syntax errors that were blocking Vite dev server from starting