app.file_access_log
TableRow level security on
Every view, download, export and share of a stored file (Section 8.4 access transparency, Section 8.6 data loss prevention). Append-only, written by the storage service.
Primary key: id
| Column | Type | Nullable | Description |
|---|---|---|---|
| id | uuid | No | Primary key, UUID v7. |
| org_id | uuid | No | Owning org. A row never moves to another org.References app.organizations.id |
| person_id | uuid | Yes | Person who accessed the file, or null for a share link opened without an account.References app.people.id |
| bucket_id | text | No | Storage bucket. |
| object_path | text | No | Object path inside the bucket. |
| action | app.file_access_action | No | What happened. |
| classification | app.data_classification | No | Classification of the file at the time of access. |
| watermarked | boolean | No | True when the delivered copy carried the viewer email and timestamp watermark. |
| accessed_ip | inet | Yes | Client IP address. Set by the database. |
| accessed_at | timestamp with time zone | No | When it happened. Set by the database. |
| created_at | timestamp with time zone | No | When the row was inserted. Set by the database. |
| created_by | uuid | Yes | Person who inserted the row, or null for a platform process. Set by the database.References app.people.id |
| updated_at | timestamp with time zone | No | When the row last changed. Set by the database. |
| updated_by | uuid | Yes | Person who last changed the row, or null for a platform process. Set by the database.References app.people.id |
| deleted_at | timestamp with time zone | Yes | Soft delete time. A row with deleted_at set is ignored by every access helper. |