Administrative acts audited together with the act, session visibility in exports

2026.10.26-audit-transactionnel-exports-sessions · 2026-10-26

Delivered build : fe3fa1e092a59791cf5ac6b984251b357b477228

Changes

• Setting the qualification regime, creating or archiving a qualification type, granting or withdrawing a qualification, and requiring two-factor authentication for a team: the act and its audit-log entry are now recorded together. If the audit entry fails, the act is rolled back and an error is returned, instead of an act with no trace.
• Requiring two-factor authentication for a team revokes the active MCP access in the same operation, and the number of revoked accesses appears in the audit log.
• A session's PDF report, the sessions CSV export and an operator's activity PDF apply the same visibility rule as the database: a session without a study is visible only to its operator and to the team's administrators and supervisors. Other roles no longer see it in these exports, and the report of a session they cannot see is refused ("Document unavailable").

Known limitations

• Other administrative acts are not covered by this release: their audit-log entry is still written after the act. Acts already recorded are not altered and are not retroactively audited.
• Operators and viewers who relied on these exports to find a colleague's sessions without a study now see fewer of them: this is intended and matches the read permissions.