audit_trail_webdav 1.0.0-alpha2

First release of Audit Trail for WebDAV, the bridge that records every WebDAV operation in the Audit Trail chain.

It subscribes to the events dispatched by the WebDAV module and writes each verb as a tamper-evident, chained audit row, without coupling the two modules to each other: WebDAV does not need to know about Audit Trail, and Audit Trail does not need to know about WebDAV.

What it does

• Audits every WebDAV verb: PUT (recorded as create or update), DELETE, MKCOL, MOVE, COPY, and the LOCK family (acquire, release, force-release).
• Records each operation with a normalized lowercase action, the resource path (webdav:[container]/[path]), and the operation context: the method, the destination path for MOVE and COPY, the lock token / timeout / owner for the LOCK family, and before / after file metadata where available.
• Ships a ready-to-use chain that claims the audit_trail_webdav channel out of the box (installed at /admin/config/system/audit-trail/chains/audit_trail_webdav); operators can re-route the channel to a different chain.

Keeps WebDAV URL tokens out of the log

When the WebDAV module authenticates by URL token, that token is part of the request path. The bridge keeps the request URI out of the audit row, so the token never lands in the log. The resource path is recorded separately, so nothing is lost.

Privacy

WebDAV operations are tied to a specific user, so all event data is written to the transient, GDPR-purgeable bucket and auto-purges at the short retention window. The permanent bucket stays empty.

Requirements

• Drupal 11, PHP 8.2 or later.
• Audit Trail, a 1.0.0-alpha release or later.
• WebDAV, a 1.0.0-alpha release or later.

This is an alpha release: it is feature-complete and tested, but the API and configuration may still change before a stable 1.0.0.