Files
Jaanus 584a5a1caa feat: add user access log read model and endpoint
Add GET /api/admin/user-admin/access-log, a server-paginated + sorted
overview of when users were added to / removed from the instance, derived
from user-created / user-deleted audit events (removed users no longer
exist in the users table, so the data is event-derived).

- user-access-log read model: per-user aggregation over events
  (DISTINCT ON + FULL OUTER JOIN), server-side pagination and a whitelisted
  sort (createdAt/removedAt/name/status, default createdAt desc)
- service resolves role names (current root role for active users, the role
  stored in the delete event for removed users, N/A when unavailable) and
  the actor who performed the add/remove
- OpenAPI schemas + query params, composition wiring, ADMIN permission,
  mounted before /user-admin so /:id does not shadow it
- e2e tests covering status, role resolution, pagination and sorting

The endpoint is plain OSS ADMIN; the Access log tab is enterprise-gated in
the frontend.
2026-08-18 12:36:50 +03:00
..