#716992: Paranoia form audit trail (log form submissions) has some ideas for logging all form submissions.
That's a pretty heavy-handed approach. A lighter approach would be to just add watchdog for a few more important actions. So far the one I care about most is "log every grant/removal of a role" but I guess there are others that are important as well.
Comments
Comment #1
gerhard killesreiter commentedI wouldn't want to use watchdog (in the sense of dblog( for this since it expires too fast and (more importantly) can be truncated from the UI. syslog would be better.
Comment #2
gregglesAgreed, though I think that's a per site thing. The module can use watchdog() and let the site admin sort out where it ends up.
We should consider merging in the better parts of http://drupalcode.org/viewvc/drupal/contributions/modules/drupalorg/role...
Comment #3
gerhard killesreiter commentedWell, paranoia is about not trusting the admin, so we should make syslog a requrement. That wouldn't rule out to have dblog enabled for convenience as well.
Comment #4
coltrane(subscribe)
Comment #5
gregglesSome of this is handled by https://www.drupal.org/project/account_sentinel
Comment #6
gregglesThis seems like an outdated request. If anyone wants to reopen it that would be fine. Please update version to 8.x-1.x.