Audit log

Admin → Audit log is the trail behind the permission system, in three tabs:

• Changes — every role and permission change: granted and revoked, roles created, updated, and deleted, primary roles switched. With actor, target, action, details, and timestamp, newest first.
• Denied attempts — actions the permission system blocked, with the missing permission and the route concerned. The tab can be cleared once diagnosed.
• Sensitive views — every time someone with elevated rights viewed private data, such as a private reservation reason.

Each tab has its filters — actor, target, action, permission, kind — and free-text search. Export CSV takes the selection with you.

The log is readable, not editable — see Reading the audit log for how to use it in practice.