Audit Logs & Security Auditing

The Fami Hero Admin Portal maintains a comprehensive, read-only audit log of all system administrative activities. This ensures compliance, traces modifications back to individual administrators, and provides an essential record for platform security audits.

---

🔍 1. Activity Audit Logs Registry

Route: /audit-logs

Every critical administrative action triggers an immediate, immutable log entry in the system database.

Search and Filtering:

1. Search: Find logs by entering an administrator's email address, action description keywords, or target user email.
2. Action Filters: Filter results by specific logged actions to isolate key events:
   • User Enabled / Disabled: Track blocks and unblocks of parent/child accounts.
   • Blocklist Updated: Track changes made to the global domain classification database.
   • Config Updated: Track modifications to SMTP settings, Firebase sync latencies, or OTP gateways.
   • Admin Actions: Trace when admins are created, enabled/disabled, or have passwords reset.
   • Login Events: Track successful and failed administrator login attempts.
3. Date Filters: Select starting and ending timestamps to view historical records.

Caption: The Audit Logs table displaying administrative emails, action types, specific descriptions, IP addresses, and timestamps.

---

🗃️ 2. Audited System Actions

Fami Hero logs the following categories of events automatically:

Event Category	Logged Metadata	System Impact
Admin Login	Admin ID, IP Address, Session Token	Validates admin session start. Logs failed login attempts.
User Suspension	Target Parent ID, Status (Suspended/Active), Reason	Denies the parent app access immediately.
Blacklist/Whitelist Change	Affected Domain, Action (Add/Remove), Category	Synced to children's devices via Firebase Realtime Database.
API Keys Update	Gateway Name (e.g., Twilio), Masked Credentials	Reloads SMS or Email dispatch parameters.

---

📥 3. Exporting Audit Reports

Super-Administrators can download local copies of activity logs for reporting or external review:

1. Navigate to /audit-logs.
2. Apply any desired date range or action filters.
3. Tap Export Logs in the top right corner.
4. Select your preferred format: CSV (for spreadsheets) or JSON (for machine reading).
5. Enforce Super-Admin secondary 2FA verification to authorize the download.
6. The file downloads directly to your device once verified.

---

⏭️ Next Step

Administrators also manage global application parameters, screen time limits, default content filters, security policies, mobile app versioning, support information, and system email templates. Continue to System Settings & Templates.