abdev
Repositories Projects Packages
7

abdev/module-admin-activity (0.1.2)

Published 2026-09-20 23:03:08 +00:00 by andriiuok

Installation

{
	"repositories": [{
			"type": "composer",
			"url": ""
		}
	]
}
composer require abdev/module-admin-activity:0.1.2

About this package

Administrative activity audit and security monitoring for Magento 2

ABDEV Admin Activity

Backend-only audit module for Magento 2.4.9. It records sanitized field diffs for product, category, customer, CMS page and CMS block repository changes, correlated product mass attribute updates, and backend authentication activity.

Changelog

0.1.1 — 2026-09-20

  • Fixed Magento DI compilation on clean installations.
  • Replaced unsupported virtual plugin types with concrete persistence-audit plugin classes.
  • Added persistence-audit plugin classes for products, categories, customers, CMS pages and CMS blocks.
  • Verified compatibility with Magento 2.4.9 and PHP 8.3+.

0.1.0

  • Initial Admin Activity module release.
  • Added sanitized audit logging for admin actions, authentication, product mass actions and persistence changes.
  • Added Admin Activity dashboard, action log, diff view, safe restore flow and retention cleanup.

Installation and operations

bin/magento module:enable Abdev_AdminActivity
bin/magento setup:upgrade
bin/magento setup:di:compile
bin/magento cache:flush
bin/magento abdev:admin-activity:status
bin/magento abdev:admin-activity:doctor
bin/magento abdev:admin-activity:cleanup --dry-run
bin/magento abdev:admin-activity:geoip:update

The Admin Activity dashboard and Action Log are placed under the existing ABDEV menu. The Action Log has filters, detail/diff view and POST-only bulk restore. Restore support is limited to edits of products, categories, customers (safe fields only), CMS pages and CMS blocks. A restore refuses changed current values by default; it never restores delete actions, credentials or secrets.

Logging and security

Source attribution is based on Magento area code and PHP SAPI: admin, REST, GraphQL, CLI and cron. Values are normalized, only changed fields are stored, and configured size limits mark truncation. Passwords, password hashes, tokens, authorization, cookies, session IDs, form keys and payment-card fields are redacted centrally. Request bodies and headers are not recorded. Audit write failures are isolated from the original Magento operation.

Login success, failure and logout are logged; new IP, user agent and recent failure heuristics mark suspicious successful logins. Optional notifications use Magento email templates and configured recipients. No raw Magento session identifier is ever stored. Retention runs daily (abdev_admin_activity_cleanup) and deletes records in batches.

Storage and compatibility

Tables are abdev_admin_activity_action_log, abdev_admin_activity_action_change, abdev_admin_activity_login, abdev_admin_activity_session and abdev_admin_activity_visit; action changes cascade with their parent log. The module is Hyvä-safe: it has no storefront JavaScript, RequireJS dependency, theme override or checkout dependency.

GeoIP currently validates a configured local GeoLite2 database path only; no MMDB file or MaxMind credential is bundled or logged. Session termination and visit-beacon UI are deliberately not enabled because Magento Security does not expose a safe session correlation mechanism from this module's one-way fingerprint alone.

Dependencies

Dependencies

ID Version
abdev/module-backend ^1.0
magento/framework >=103.0
magento/module-backend >=102.0
magento/module-config >=101.0
magento/module-security >=100.4
php ^8.3 || ^8.4 || ^8.5
Details
Composer
2026-09-20 23:03:08 +00:00
2
Abdev
proprietary
88 KiB
Assets (1)
abdev-module-admin-activity.0.1.2.zip 88 KiB
Versions (3) View all
0.1.2 2026-09-20
0.1.1 2026-09-20
0.1.0 2026-09-20