Audit Log

The problem

A price dropped, a promotion started a day early, a product disappeared from a channel: the Sylius 2 admin cannot tell who did it. The audit plugins written for Sylius 1 were never ported.

Features

• Every create, update and delete of the audited resources is recorded with a field-level diff (old → new), the date (UTC), the actor (administrator, customer, command line or system), the source (admin, admin API, shop, shop API, command line) and the route or command.

• Audit log grid (Configuration > Audit log) filtered by date, resource, action, actor and request; a readable diff page per entry.

• History card on the product, order, customer and promotion pages, including the resources they own (variants, prices, coupons, payments, addresses).

• Request id: “All changes of this request” lists everything one save changed.

• Secrets masked: passwords, tokens, payment details and gateway configuration are logged as changed, never with their values.

• GDPR: retention purge command (365 days by default), customer anonymisation command, IP addresses not stored by default.

• Extensible: audit your own Doctrine entities, add label or owner resolvers, enrich or skip entries through an event.

Installation

1. composer require tmonier/sylius-audit-log-plugin

2. Register Tmonier\SyliusAuditLogPlugin\TmonierSyliusAuditLogPlugin in config/bundles.php.

3. Import @TmonierSyliusAuditLogPlugin/config/config.yaml and the admin routes.

4. Run bin/console doctrine:migrations:migrate.

5. Schedule bin/console tmonier:audit-log:purge (daily, for instance).

Compatibility

Sylius 2.2 and 2.3; MySQL, MariaDB and PostgreSQL. Can be installed next to the Timeline plugin (business view of an order’s life).

Languages

English, French, German, Spanish, Italian, Dutch, Polish.

Categories / tags

Back office, Security, Compliance, GDPR, Audit trail, Administration