Audit Trail User Story Summary
*Note: Additional work needs to be done around the definitions of who is allowed to do the following. Some institutions use an admin, others a database administrator.
Go to Audit Trail Functional Requirements Home
Audit trail viewing
Admin can search for all newly created/amended/deleted records
Admin can view/export contents of all deleted records (note: deleted records to be archived)
Admin can view/export all changes to a given record by procedure
Admin can view/export all user login/logout times over a specific period
Admin can view/export system use by user (what did person x do yesterday?)
Admin can view/export system use by function (all new object records created in August)
Admin can view/export system use by function & user (all new vocab terms created by person x)
Archives
DBA or Admin can view all "deleted" records
DBA or Admin can view originals of all merged records
DBA or Admin can view all "inactive" users, records, vocabulary terms
DBA or Admin can reinstate any deleted, merged, or inactivated records/terms
Discussion questions
Which of the above functions are appropriate for a user w/permissions vs. an admin?
Where do each of these viewings occur? Should viewing all the changes to a record be available for viewing within the record itself?
Does the system have a "flush" mechanism? How much archived data is too much (e.g. how long is every change to every field maintained?) What is realistic/expected?