abdev

Repositories Projects Packages

7

abdev/module-admin-activity (0.1.0)

Published 2026-09-20 20:26:53 +00:00 by andriiuok

Installation

Setup this registry in your ~/.composer/config.json file:

{
	"repositories": [{
			"type": "composer",
			"url": ""
		}
	]
}

To install the package using Composer, run the following command:

composer require abdev/module-admin-activity:0.1.0

For more information on the Composer registry, see the documentation.

About this package

Administrative activity audit and security monitoring for Magento 2

ABDEV Admin Activity

Backend-only audit module for Magento 2.4.9. It records sanitized field diffs for product, category, customer, CMS page and CMS block repository changes, correlated product mass attribute updates, and backend authentication activity.

Installation and operations

bin/magento module:enable Abdev_AdminActivity
bin/magento setup:upgrade
bin/magento setup:di:compile
bin/magento cache:flush
bin/magento abdev:admin-activity:status
bin/magento abdev:admin-activity:doctor
bin/magento abdev:admin-activity:cleanup --dry-run
bin/magento abdev:admin-activity:geoip:update

The Admin Activity dashboard and Action Log are placed under the existing ABDEV menu. The Action Log has filters, detail/diff view and POST-only bulk restore. Restore support is limited to edits of products, categories, customers (safe fields only), CMS pages and CMS blocks. A restore refuses changed current values by default; it never restores delete actions, credentials or secrets.

Logging and security

Source attribution is based on Magento area code and PHP SAPI: admin, REST, GraphQL, CLI and cron. Values are normalized, only changed fields are stored, and configured size limits mark truncation. Passwords, password hashes, tokens, authorization, cookies, session IDs, form keys and payment-card fields are redacted centrally. Request bodies and headers are not recorded. Audit write failures are isolated from the original Magento operation.

Login success, failure and logout are logged; new IP, user agent and recent failure heuristics mark suspicious successful logins. Optional notifications use Magento email templates and configured recipients. No raw Magento session identifier is ever stored. Retention runs daily (abdev_admin_activity_cleanup) and deletes records in batches.

Storage and compatibility

Tables are abdev_admin_activity_action_log, abdev_admin_activity_action_change, abdev_admin_activity_login, abdev_admin_activity_session and abdev_admin_activity_visit; action changes cascade with their parent log. The module is Hyvä-safe: it has no storefront JavaScript, RequireJS dependency, theme override or checkout dependency.

GeoIP currently validates a configured local GeoLite2 database path only; no MMDB file or MaxMind credential is bundled or logged. Session termination and visit-beacon UI are deliberately not enabled because Magento Security does not expose a safe session correlation mechanism from this module's one-way fingerprint alone.

Dependencies

Dependencies

ID	Version
abdev/module-backend	^1.0
magento/framework	>=103.0
magento/module-backend	>=102.0
magento/module-config	>=101.0
magento/module-security	>=100.4
php	^8.3 || ^8.4 || ^8.5

Details

Composer

2026-09-20 20:26:53 +00:00

3

Abdev

proprietary

87 KiB

Assets (1)

abdev-module-admin-activity.0.1.0.zip 87 KiB

Versions (3) View all

0.1.2 2026-09-20

0.1.1 2026-09-20

0.1.0 2026-09-20