Audit log
Every action taken through FeelOrganized, attributed to the human who took it and the grant that permitted it. Append only, and visible to the clinician whose practice was touched.
Not connected to a database
This is the record that makes the attribution claim checkable rather than asserted. FeelOrganized has no Supabase project behind it yet, so there is nothing to read and nothing to save to. The schema and the access rules this screen runs on are written and tested, in sql/. Adding the environment variables switches this screen on with no code change.
| When | Who acted | On behalf of | Action | Permission | Practice | Target |
|---|
No events recorded
The log is empty because nothing has happened yet. It is not filtered, and it is not hiding anything. Once there is a database behind it, this table filters by practice, by who acted, by kind of action, by whether the attempt was allowed or refused, and by date.
What each event records
occurred_at- When the action happened, to the second.
actor- The human who acted, by their own identity.
on_behalf_of- The clinician or practice the action was taken for.
grant_id- The specific grant that permitted the action.
scope- The named permission that was exercised.
action- What was done, in the system's own vocabulary.
target- The record that was touched.
source_ip- Where the request came from.