From 05b1ff9738201cafd7dea2cba4d9e5395b1e33da Mon Sep 17 00:00:00 2001 From: shamoon <4887959+shamoon@users.noreply.github.com> Date: Tue, 23 Apr 2024 08:16:28 -0700 Subject: [PATCH] Feature: document history (audit log UI) (#6388) --- Pipfile.lock | 8 +- docs/api.md | 1 + docs/usage.md | 6 + src-ui/messages.xlf | 215 +++++++++++++----- src-ui/src/app/app.module.ts | 2 + .../permissions-select.component.html | 18 +- .../permissions-select.component.spec.ts | 13 ++ .../permissions-select.component.ts | 22 +- .../document-detail.component.html | 11 + .../document-detail.component.ts | 12 + .../document-history.component.html | 59 +++++ .../document-history.component.scss | 0 .../document-history.component.spec.ts | 57 +++++ .../document-history.component.ts | 36 +++ src-ui/src/app/data/auditlog-entry.ts | 18 ++ src-ui/src/app/data/ui-settings.ts | 6 + src-ui/src/app/pipes/custom-date.pipe.spec.ts | 10 + src-ui/src/app/pipes/custom-date.pipe.ts | 45 ++++ .../src/app/services/permissions.service.ts | 1 + .../services/rest/document.service.spec.ts | 7 + .../src/app/services/rest/document.service.ts | 7 +- .../src/app/services/settings.service.spec.ts | 1 + src/documents/models.py | 7 +- src/documents/serialisers.py | 7 +- src/documents/tests/test_api_documents.py | 127 +++++++++++ src/documents/tests/test_api_uisettings.py | 1 + src/documents/tests/test_file_handling.py | 30 +-- src/documents/views.py | 64 ++++++ src/locale/en_US/LC_MESSAGES/django.po | 140 ++++++------ 29 files changed, 773 insertions(+), 158 deletions(-) create mode 100644 src-ui/src/app/components/document-history/document-history.component.html create mode 100644 src-ui/src/app/components/document-history/document-history.component.scss create mode 100644 src-ui/src/app/components/document-history/document-history.component.spec.ts create mode 100644 src-ui/src/app/components/document-history/document-history.component.ts create mode 100644 src-ui/src/app/data/auditlog-entry.ts diff --git a/Pipfile.lock b/Pipfile.lock index da4a08ea0..bd641aa43 100644 --- a/Pipfile.lock +++ b/Pipfile.lock @@ -479,12 +479,12 @@ }, "django-auditlog": { "hashes": [ - "sha256:7bc2c87e4aff62dec9785d1b2359a2b27148f8c286f8a52b9114fc7876c5a9f7", - "sha256:b9d3acebb64f3f2785157efe3f2f802e0929aafc579d85bbfb9827db4adab532" + "sha256:92db1cf4a51ceca5c26b3ff46997d9e3305a02da1bd435e2efb5b8b6d300ce1f", + "sha256:9de49f80a4911135d136017123cd73461f869b4947eec14d5e76db4b88182f3f" ], "index": "pypi", - "markers": "python_version >= '3.7'", - "version": "==2.3.0" + "markers": "python_version >= '3.8'", + "version": "==3.0.0" }, "django-celery-results": { "hashes": [ diff --git a/docs/api.md b/docs/api.md index 0e98b210d..6a275be61 100644 --- a/docs/api.md +++ b/docs/api.md @@ -140,6 +140,7 @@ document. Paperless only reports PDF metadata at this point. - `/api/documents//notes/`: Retrieve notes for a document. - `/api/documents//share_links/`: Retrieve share links for a document. +- `/api/documents//history/`: Retrieve history of changes for a document. ## Authorization diff --git a/docs/usage.md b/docs/usage.md index 7cedb976a..c9003d35d 100644 --- a/docs/usage.md +++ b/docs/usage.md @@ -472,6 +472,12 @@ Paperless-ngx supports 3 basic editing operations for PDFs (these operations can Note that rotation alters the Paperless-ngx _original_ file, which would, for example, invalidate a digital signature. +## Document History + +As of version 2.7, Paperless-ngx automatically records all changes to a document and records this in an audit log. The feature requires [`PAPERLESS_AUDIT_LOG_ENABLED`](configuration.md#PAPERLESS_AUDIT_LOG_ENABLED) be enabled, which it is by default as of version 2.7. +Changes to documents are visible under the "History" tab. Note that certain changes such as those made by workflows, record the 'actor' +as "System". + ## Best practices {#basic-searching} Paperless offers a couple tools that help you organize your document diff --git a/src-ui/messages.xlf b/src-ui/messages.xlf index 6ec2b3815..eaa2d7bfe 100644 --- a/src-ui/messages.xlf +++ b/src-ui/messages.xlf @@ -424,6 +424,10 @@ src/app/components/common/permissions-select/permissions-select.component.html 22 + + src/app/components/document-history/document-history.component.html + 35 + Read the documentation about this setting @@ -447,7 +451,7 @@ src/app/components/document-detail/document-detail.component.html - 322 + 333 @@ -506,7 +510,7 @@ src/app/components/document-detail/document-detail.component.html - 314 + 325 src/app/components/document-list/save-view-config-dialog/save-view-config-dialog.component.html @@ -636,7 +640,7 @@ src/app/components/document-detail/document-detail.component.html - 331 + 342 src/app/components/document-list/document-list.component.html @@ -947,7 +951,7 @@ src/app/services/rest/document.service.ts - 32 + 33 @@ -977,7 +981,7 @@ src/app/components/document-detail/document-detail.component.html - 290 + 301 src/app/components/document-list/bulk-editor/bulk-editor.component.html @@ -1682,7 +1686,7 @@ src/app/services/rest/document.service.ts - 29 + 30 @@ -2032,7 +2036,7 @@ src/app/components/document-detail/document-detail.component.ts - 768 + 769 src/app/components/document-list/bulk-editor/bulk-editor.component.ts @@ -2075,15 +2079,15 @@ src/app/components/document-detail/document-detail.component.ts - 770 + 771 src/app/components/document-detail/document-detail.component.ts - 1052 + 1064 src/app/components/document-detail/document-detail.component.ts - 1090 + 1102 src/app/components/document-list/bulk-editor/bulk-editor.component.ts @@ -4321,7 +4325,7 @@ Inherited from group src/app/components/common/permissions-select/permissions-select.component.ts - 61 + 63 @@ -4822,7 +4826,7 @@ src/app/services/rest/document.service.ts - 27 + 28 @@ -4849,7 +4853,7 @@ src/app/services/rest/document.service.ts - 26 + 27 @@ -5119,7 +5123,7 @@ src/app/components/document-detail/document-detail.component.ts - 1108 + 1120 src/app/guards/dirty-saved-view.guard.ts @@ -5174,7 +5178,7 @@ src/app/services/rest/document.service.ts - 28 + 29 @@ -5312,103 +5316,110 @@ 279,282 + + History + + src/app/components/document-detail/document-detail.component.html + 290 + + Save & next src/app/components/document-detail/document-detail.component.html - 316 + 327 Save & close src/app/components/document-detail/document-detail.component.html - 319 + 330 Enter Password src/app/components/document-detail/document-detail.component.html - 370 + 381 An error occurred loading content: src/app/components/document-detail/document-detail.component.ts - 327,329 + 328,330 Document changes detected src/app/components/document-detail/document-detail.component.ts - 350 + 351 The version of this document in your browser session appears older than the existing version. src/app/components/document-detail/document-detail.component.ts - 351 + 352 Saving the document here may overwrite other changes that were made. To restore the existing version, discard your changes or close the document. src/app/components/document-detail/document-detail.component.ts - 352 + 353 Ok src/app/components/document-detail/document-detail.component.ts - 354 + 355 Error retrieving metadata src/app/components/document-detail/document-detail.component.ts - 494 + 495 Error retrieving suggestions. src/app/components/document-detail/document-detail.component.ts - 519 + 520 Document saved successfully. src/app/components/document-detail/document-detail.component.ts - 640 + 641 src/app/components/document-detail/document-detail.component.ts - 651 + 652 Error saving document src/app/components/document-detail/document-detail.component.ts - 655 + 656 src/app/components/document-detail/document-detail.component.ts - 696 + 697 Confirm delete src/app/components/document-detail/document-detail.component.ts - 723 + 724 src/app/components/manage/management-list/management-list.component.ts @@ -5423,35 +5434,35 @@ Do you really want to delete document ""? src/app/components/document-detail/document-detail.component.ts - 724 + 725 The files for this document will be deleted permanently. This operation cannot be undone. src/app/components/document-detail/document-detail.component.ts - 725 + 726 Delete document src/app/components/document-detail/document-detail.component.ts - 727 + 728 Error deleting document src/app/components/document-detail/document-detail.component.ts - 746 + 747 Redo OCR confirm src/app/components/document-detail/document-detail.component.ts - 766 + 767 src/app/components/document-list/bulk-editor/bulk-editor.component.ts @@ -5462,63 +5473,63 @@ This operation will permanently redo OCR for this document. src/app/components/document-detail/document-detail.component.ts - 767 + 768 Redo OCR operation will begin in the background. Close and re-open or reload this document after the operation has completed to see new content. src/app/components/document-detail/document-detail.component.ts - 778 + 779 Error executing operation src/app/components/document-detail/document-detail.component.ts - 789 + 790 Page Fit src/app/components/document-detail/document-detail.component.ts - 858 + 859 Split confirm src/app/components/document-detail/document-detail.component.ts - 1050 + 1062 This operation will split the selected document(s) into new documents. src/app/components/document-detail/document-detail.component.ts - 1051 + 1063 Split operation will begin in the background. src/app/components/document-detail/document-detail.component.ts - 1066 + 1078 Error executing split operation src/app/components/document-detail/document-detail.component.ts - 1075 + 1087 Rotate confirm src/app/components/document-detail/document-detail.component.ts - 1087 + 1099 src/app/components/document-list/bulk-editor/bulk-editor.component.ts @@ -5529,14 +5540,14 @@ This operation will permanently rotate the original version of the current document. src/app/components/document-detail/document-detail.component.ts - 1088 + 1100 This will alter the original copy. src/app/components/document-detail/document-detail.component.ts - 1089 + 1101 src/app/components/document-list/bulk-editor/bulk-editor.component.ts @@ -5547,14 +5558,21 @@ Rotation will begin in the background. Close and re-open the document after the operation has completed to see the changes. src/app/components/document-detail/document-detail.component.ts - 1105 + 1117 Error executing rotate operation src/app/components/document-detail/document-detail.component.ts - 1117 + 1129 + + + + No entries found. + + src/app/components/document-history/document-history.component.html + 10 @@ -6094,7 +6112,7 @@ src/app/services/rest/document.service.ts - 25 + 26 @@ -6126,7 +6144,7 @@ src/app/services/rest/document.service.ts - 33 + 34 @@ -6176,7 +6194,7 @@ src/app/services/rest/document.service.ts - 30 + 31 @@ -7370,6 +7388,97 @@ 36 + + Just now + + src/app/pipes/custom-date.pipe.ts + 39 + + + + year ago + + src/app/pipes/custom-date.pipe.ts + 42 + + + + years ago + + src/app/pipes/custom-date.pipe.ts + 43 + + + + month ago + + src/app/pipes/custom-date.pipe.ts + 47 + + + + months ago + + src/app/pipes/custom-date.pipe.ts + 48 + + + + week ago + + src/app/pipes/custom-date.pipe.ts + 52 + + + + weeks ago + + src/app/pipes/custom-date.pipe.ts + 53 + + + + day ago + + src/app/pipes/custom-date.pipe.ts + 57 + + + + days ago + + src/app/pipes/custom-date.pipe.ts + 58 + + + + hour ago + + src/app/pipes/custom-date.pipe.ts + 62 + + + + hours ago + + src/app/pipes/custom-date.pipe.ts + 63 + + + + minute ago + + src/app/pipes/custom-date.pipe.ts + 67 + + + + minutes ago + + src/app/pipes/custom-date.pipe.ts + 68 + + (no title) @@ -7532,14 +7641,14 @@ Modified src/app/services/rest/document.service.ts - 31 + 32 Search score src/app/services/rest/document.service.ts - 40 + 41 Score is a value returned by the full text search engine and specifies how well a result matches the given query diff --git a/src-ui/src/app/app.module.ts b/src-ui/src/app/app.module.ts index f990122dd..d7263de82 100644 --- a/src-ui/src/app/app.module.ts +++ b/src-ui/src/app/app.module.ts @@ -119,6 +119,7 @@ import { NgxFilesizeModule } from 'ngx-filesize' import { RotateConfirmDialogComponent } from './components/common/confirm-dialog/rotate-confirm-dialog/rotate-confirm-dialog.component' import { MergeConfirmDialogComponent } from './components/common/confirm-dialog/merge-confirm-dialog/merge-confirm-dialog.component' import { SplitConfirmDialogComponent } from './components/common/confirm-dialog/split-confirm-dialog/split-confirm-dialog.component' +import { DocumentHistoryComponent } from './components/document-history/document-history.component' import { airplane, archive, @@ -472,6 +473,7 @@ function initializeApp(settings: SettingsService) { RotateConfirmDialogComponent, MergeConfirmDialogComponent, SplitConfirmDialogComponent, + DocumentHistoryComponent, ], imports: [ BrowserModule, diff --git a/src-ui/src/app/components/common/permissions-select/permissions-select.component.html b/src-ui/src/app/components/common/permissions-select/permissions-select.component.html index a2aa4a5c0..049d0e776 100644 --- a/src-ui/src/app/components/common/permissions-select/permissions-select.component.html +++ b/src-ui/src/app/components/common/permissions-select/permissions-select.component.html @@ -9,17 +9,17 @@
Delete
View
- @for (type of PermissionType | keyvalue; track type) { -
  • -
    {{type.key}}:
    -
    - - + @for (type of allowedTypes; track type) { +
  • +
    {{type}}:
    +
    + +
    @for (action of PermissionAction | keyvalue; track action) { -
    - - +
    + +
    }
    • diff --git a/src-ui/src/app/components/common/permissions-select/permissions-select.component.spec.ts b/src-ui/src/app/components/common/permissions-select/permissions-select.component.spec.ts index a01630e00..879a4d9bf 100644 --- a/src-ui/src/app/components/common/permissions-select/permissions-select.component.spec.ts +++ b/src-ui/src/app/components/common/permissions-select/permissions-select.component.spec.ts @@ -12,6 +12,9 @@ import { } from 'src/app/services/permissions.service' import { By } from '@angular/platform-browser' import { NgxBootstrapIconsModule, allIcons } from 'ngx-bootstrap-icons' +import { SettingsService } from 'src/app/services/settings.service' +import { SETTINGS_KEYS } from 'src/app/data/ui-settings' +import { HttpClientTestingModule } from '@angular/common/http/testing' const permissions = [ 'add_document', @@ -28,6 +31,7 @@ describe('PermissionsSelectComponent', () => { let component: PermissionsSelectComponent let fixture: ComponentFixture let permissionsChangeResult: Permissions + let settingsService: SettingsService beforeEach(async () => { TestBed.configureTestingModule({ @@ -38,9 +42,11 @@ describe('PermissionsSelectComponent', () => { ReactiveFormsModule, NgbModule, NgxBootstrapIconsModule.pick(allIcons), + HttpClientTestingModule, ], }).compileComponents() + settingsService = TestBed.inject(SettingsService) fixture = TestBed.createComponent(PermissionsSelectComponent) fixture.debugElement.injector.get(NG_VALUE_ACCESSOR) component = fixture.componentInstance @@ -99,4 +105,11 @@ describe('PermissionsSelectComponent', () => { const input2 = fixture.debugElement.query(By.css('input#Tag_Change')) expect(input2.nativeElement.disabled).toBeTruthy() }) + + it('should exclude history permissions if disabled', () => { + settingsService.set(SETTINGS_KEYS.AUDITLOG_ENABLED, false) + fixture = TestBed.createComponent(PermissionsSelectComponent) + component = fixture.componentInstance + expect(component.allowedTypes).not.toContain('History') + }) }) diff --git a/src-ui/src/app/components/common/permissions-select/permissions-select.component.ts b/src-ui/src/app/components/common/permissions-select/permissions-select.component.ts index 49d879677..977eec5ac 100644 --- a/src-ui/src/app/components/common/permissions-select/permissions-select.component.ts +++ b/src-ui/src/app/components/common/permissions-select/permissions-select.component.ts @@ -12,6 +12,8 @@ import { PermissionType, } from 'src/app/services/permissions.service' import { ComponentWithPermissions } from '../../with-permissions/with-permissions.component' +import { SettingsService } from 'src/app/services/settings.service' +import { SETTINGS_KEYS } from 'src/app/data/ui-settings' @Component({ providers: [ @@ -60,15 +62,23 @@ export class PermissionsSelectComponent inheritedWarning: string = $localize`Inherited from group` - constructor(private readonly permissionsService: PermissionsService) { + public allowedTypes = Object.keys(PermissionType) + + constructor( + private readonly permissionsService: PermissionsService, + private readonly settingsService: SettingsService + ) { super() - for (const type in PermissionType) { + if (!this.settingsService.get(SETTINGS_KEYS.AUDITLOG_ENABLED)) { + this.allowedTypes.splice(this.allowedTypes.indexOf('History'), 1) + } + this.allowedTypes.forEach((type) => { const control = new FormGroup({}) for (const action in PermissionAction) { control.addControl(action, new FormControl(null)) } this.form.addControl(type, control) - } + }) } writeValue(permissions: string[]): void { @@ -92,7 +102,7 @@ export class PermissionsSelectComponent } } }) - Object.keys(PermissionType).forEach((type) => { + this.allowedTypes.forEach((type) => { if ( Object.values(this.form.get(type).value).every((val) => val == true) ) { @@ -191,7 +201,7 @@ export class PermissionsSelectComponent } updateDisabledStates() { - for (const type in PermissionType) { + this.allowedTypes.forEach((type) => { const control = this.form.get(type) let actionControl: AbstractControl for (const action in PermissionAction) { @@ -200,6 +210,6 @@ export class PermissionsSelectComponent ? actionControl.disable() : actionControl.enable() } - } + }) } } diff --git a/src-ui/src/app/components/document-detail/document-detail.component.html b/src-ui/src/app/components/document-detail/document-detail.component.html index 14b235fb7..6e2d47e2b 100644 --- a/src-ui/src/app/components/document-detail/document-detail.component.html +++ b/src-ui/src/app/components/document-detail/document-detail.component.html @@ -285,6 +285,17 @@ } + @if (historyEnabled) { +
  • + History + +
    + +
    +     +
    • + } + @if (showPermissions) {
  • Permissions diff --git a/src-ui/src/app/components/document-detail/document-detail.component.ts b/src-ui/src/app/components/document-detail/document-detail.component.ts index d8f63faf2..db0d16f5a 100644 --- a/src-ui/src/app/components/document-detail/document-detail.component.ts +++ b/src-ui/src/app/components/document-detail/document-detail.component.ts @@ -77,6 +77,7 @@ enum DocumentDetailNavIDs { Preview = 4, Notes = 5, Permissions = 6, + History = 7, } enum ContentRenderType { @@ -902,6 +903,17 @@ export class DocumentDetailComponent ) } + get historyEnabled(): boolean { + return ( + this.settings.get(SETTINGS_KEYS.AUDITLOG_ENABLED) && + this.userIsOwner && + this.permissionsService.currentUserCan( + PermissionAction.View, + PermissionType.History + ) + ) + } + notesUpdated(notes: DocumentNote[]) { this.document.notes = notes this.openDocumentService.refreshDocument(this.documentId) diff --git a/src-ui/src/app/components/document-history/document-history.component.html b/src-ui/src/app/components/document-history/document-history.component.html new file mode 100644 index 000000000..65ecaff0a --- /dev/null +++ b/src-ui/src/app/components/document-history/document-history.component.html @@ -0,0 +1,59 @@ +@if (loading) { +
    + +
    +} @else { +
      + @if (entries.length === 0) { +
    • +
      + No entries found. +
      +
      • + } @else { + @for (entry of entries; track entry.id) { +
    • +
      + +
      + {{ entry.timestamp | customDate:'longDate' }} {{ entry.timestamp | date:'shortTime' }} +
      +       + {{ entry.timestamp | customDate:'relative' }} + @if (entry.actor) { + {{ entry.actor.username }} + } @else { + System + } + {{ entry.action | titlecase }} +
      + @if (entry.action === AuditLogAction.Update) { +
        + @for (change of entry.changes | keyvalue; track change.key) { + @if (change.value["type"] === 'm2m') { +
      • + {{ change.value["operation"] | titlecase }}  + {{ change.key | titlecase }}:  + {{ change.value["objects"].join(', ') }} +
        • + } + @else if (change.value["type"] === 'custom_field') { +
      • + {{ change.value["field"] }}:  + {{ change.value["value"] }} +
        • + } + @else { +
      • + {{ change.key | titlecase }}:  + {{ change.value[1] }} +
        • + } + } +
      + } +
      • + } + } +
    +} diff --git a/src-ui/src/app/components/document-history/document-history.component.scss b/src-ui/src/app/components/document-history/document-history.component.scss new file mode 100644 index 000000000..e69de29bb diff --git a/src-ui/src/app/components/document-history/document-history.component.spec.ts b/src-ui/src/app/components/document-history/document-history.component.spec.ts new file mode 100644 index 000000000..3a26c8a9b --- /dev/null +++ b/src-ui/src/app/components/document-history/document-history.component.spec.ts @@ -0,0 +1,57 @@ +import { ComponentFixture, TestBed } from '@angular/core/testing' + +import { DocumentHistoryComponent } from './document-history.component' +import { DocumentService } from 'src/app/services/rest/document.service' +import { of } from 'rxjs' +import { AuditLogAction } from 'src/app/data/auditlog-entry' +import { HttpClientTestingModule } from '@angular/common/http/testing' +import { CustomDatePipe } from 'src/app/pipes/custom-date.pipe' +import { DatePipe } from '@angular/common' +import { NgbCollapseModule } from '@ng-bootstrap/ng-bootstrap' +import { NgxBootstrapIconsModule, allIcons } from 'ngx-bootstrap-icons' + +describe('DocumentHistoryComponent', () => { + let component: DocumentHistoryComponent + let fixture: ComponentFixture + let documentService: DocumentService + + beforeEach(async () => { + await TestBed.configureTestingModule({ + declarations: [DocumentHistoryComponent, CustomDatePipe], + providers: [DatePipe], + imports: [ + HttpClientTestingModule, + NgbCollapseModule, + NgxBootstrapIconsModule.pick(allIcons), + ], + }).compileComponents() + + fixture = TestBed.createComponent(DocumentHistoryComponent) + documentService = TestBed.inject(DocumentService) + component = fixture.componentInstance + }) + + it('should get audit log entries on init', () => { + const getHistorySpy = jest.spyOn(documentService, 'getHistory') + getHistorySpy.mockReturnValue( + of([ + { + id: 1, + actor: { + id: 1, + username: 'user1', + }, + action: AuditLogAction.Create, + timestamp: '2021-01-01T00:00:00Z', + remote_addr: '1.2.3.4', + changes: { + title: ['old title', 'new title'], + }, + }, + ]) + ) + component.documentId = 1 + fixture.detectChanges() + expect(getHistorySpy).toHaveBeenCalledWith(1) + }) +}) diff --git a/src-ui/src/app/components/document-history/document-history.component.ts b/src-ui/src/app/components/document-history/document-history.component.ts new file mode 100644 index 000000000..7870c1714 --- /dev/null +++ b/src-ui/src/app/components/document-history/document-history.component.ts @@ -0,0 +1,36 @@ +import { Component, Input, OnInit } from '@angular/core' +import { AuditLogAction, AuditLogEntry } from 'src/app/data/auditlog-entry' +import { DocumentService } from 'src/app/services/rest/document.service' + +@Component({ + selector: 'pngx-document-history', + templateUrl: './document-history.component.html', + styleUrl: './document-history.component.scss', +}) +export class DocumentHistoryComponent implements OnInit { + public AuditLogAction = AuditLogAction + + private _documentId: number + @Input() + set documentId(id: number) { + this._documentId = id + this.ngOnInit() + } + + public loading: boolean = true + public entries: AuditLogEntry[] = [] + + constructor(private documentService: DocumentService) {} + + ngOnInit(): void { + if (this._documentId) { + this.loading = true + this.documentService + .getHistory(this._documentId) + .subscribe((auditLogEntries) => { + this.entries = auditLogEntries + this.loading = false + }) + } + } +} diff --git a/src-ui/src/app/data/auditlog-entry.ts b/src-ui/src/app/data/auditlog-entry.ts new file mode 100644 index 000000000..dc45a6500 --- /dev/null +++ b/src-ui/src/app/data/auditlog-entry.ts @@ -0,0 +1,18 @@ +import { User } from './user' + +export enum AuditLogAction { + Create = 'create', + Update = 'update', + Delete = 'delete', +} + +export interface AuditLogEntry { + id: number + timestamp: string + action: AuditLogAction + changes: { + [key: string]: string[] + } + remote_addr: string + actor?: User +} diff --git a/src-ui/src/app/data/ui-settings.ts b/src-ui/src/app/data/ui-settings.ts index e55f25278..41f9ba361 100644 --- a/src-ui/src/app/data/ui-settings.ts +++ b/src-ui/src/app/data/ui-settings.ts @@ -37,6 +37,7 @@ export const SETTINGS_KEYS = { NOTIFICATIONS_CONSUMER_SUPPRESS_ON_DASHBOARD: 'general-settings:notifications:consumer-suppress-on-dashboard', NOTES_ENABLED: 'general-settings:notes-enabled', + AUDITLOG_ENABLED: 'general-settings:auditlog-enabled', SLIM_SIDEBAR: 'general-settings:slim-sidebar', UPDATE_CHECKING_ENABLED: 'general-settings:update-checking:enabled', UPDATE_CHECKING_BACKEND_SETTING: @@ -143,6 +144,11 @@ export const SETTINGS: UiSetting[] = [ type: 'boolean', default: true, }, + { + key: SETTINGS_KEYS.AUDITLOG_ENABLED, + type: 'boolean', + default: true, + }, { key: SETTINGS_KEYS.UPDATE_CHECKING_ENABLED, type: 'boolean', diff --git a/src-ui/src/app/pipes/custom-date.pipe.spec.ts b/src-ui/src/app/pipes/custom-date.pipe.spec.ts index 5b9d0b176..87e99212b 100644 --- a/src-ui/src/app/pipes/custom-date.pipe.spec.ts +++ b/src-ui/src/app/pipes/custom-date.pipe.spec.ts @@ -30,4 +30,14 @@ describe('CustomDatePipe', () => { ) ).toEqual('2023-05-04') }) + + it('should support relative date formatting', () => { + const now = new Date() + const notNow = new Date(now) + notNow.setDate(now.getDate() - 1) + expect(datePipe.transform(notNow, 'relative')).toEqual('1 day ago') + notNow.setDate(now.getDate() - 2) + expect(datePipe.transform(notNow, 'relative')).toEqual('2 days ago') + expect(datePipe.transform(now, 'relative')).toEqual('Just now') + }) }) diff --git a/src-ui/src/app/pipes/custom-date.pipe.ts b/src-ui/src/app/pipes/custom-date.pipe.ts index 079091fa9..e6034c59b 100644 --- a/src-ui/src/app/pipes/custom-date.pipe.ts +++ b/src-ui/src/app/pipes/custom-date.pipe.ts @@ -34,6 +34,51 @@ export class CustomDatePipe implements PipeTransform { this.settings.get(SETTINGS_KEYS.DATE_LOCALE) || this.defaultLocale let f = format || this.settings.get(SETTINGS_KEYS.DATE_FORMAT) + if (format === 'relative') { + const seconds = Math.floor((+new Date() - +new Date(value)) / 1000) + if (seconds < 60) return $localize`Just now` + const intervals = { + year: { + label: $localize`year ago`, + labelPlural: $localize`years ago`, + interval: 31536000, + }, + month: { + label: $localize`month ago`, + labelPlural: $localize`months ago`, + interval: 2592000, + }, + week: { + label: $localize`week ago`, + labelPlural: $localize`weeks ago`, + interval: 604800, + }, + day: { + label: $localize`day ago`, + labelPlural: $localize`days ago`, + interval: 86400, + }, + hour: { + label: $localize`hour ago`, + labelPlural: $localize`hours ago`, + interval: 3600, + }, + minute: { + label: $localize`minute ago`, + labelPlural: $localize`minutes ago`, + interval: 60, + }, + } + let counter + for (const i in intervals) { + counter = Math.floor(seconds / intervals[i].interval) + if (counter > 0) { + const label = + counter > 1 ? intervals[i].labelPlural : intervals[i].label + return `${counter} ${label}` + } + } + } if (l == 'iso-8601') { return this.datePipe.transform(value, FORMAT_TO_ISO_FORMAT[f], timezone) } else { diff --git a/src-ui/src/app/services/permissions.service.ts b/src-ui/src/app/services/permissions.service.ts index 0648f461f..c80bc763d 100644 --- a/src-ui/src/app/services/permissions.service.ts +++ b/src-ui/src/app/services/permissions.service.ts @@ -19,6 +19,7 @@ export enum PermissionType { PaperlessTask = '%s_paperlesstask', AppConfig = '%s_applicationconfiguration', UISettings = '%s_uisettings', + History = '%s_logentry', Note = '%s_note', MailAccount = '%s_mailaccount', MailRule = '%s_mailrule', diff --git a/src-ui/src/app/services/rest/document.service.spec.ts b/src-ui/src/app/services/rest/document.service.spec.ts index 1f3ccc0af..c379ba010 100644 --- a/src-ui/src/app/services/rest/document.service.spec.ts +++ b/src-ui/src/app/services/rest/document.service.spec.ts @@ -266,6 +266,13 @@ describe(`DocumentService`, () => { ) expect(req.request.body.remove_inbox_tags).toEqual(true) }) + + it('should call appropriate api endpoint for getting audit log', () => { + subscription = service.getHistory(documents[0].id).subscribe() + const req = httpTestingController.expectOne( + `${environment.apiBaseUrl}${endpoint}/${documents[0].id}/history/` + ) + }) }) afterEach(() => { diff --git a/src-ui/src/app/services/rest/document.service.ts b/src-ui/src/app/services/rest/document.service.ts index 5c0f0a1dc..f078a8de5 100644 --- a/src-ui/src/app/services/rest/document.service.ts +++ b/src-ui/src/app/services/rest/document.service.ts @@ -19,7 +19,8 @@ import { PermissionsService, } from '../permissions.service' import { SettingsService } from '../settings.service' -import { SETTINGS, SETTINGS_KEYS } from 'src/app/data/ui-settings' +import { SETTINGS_KEYS } from 'src/app/data/ui-settings' +import { AuditLogEntry } from 'src/app/data/auditlog-entry' export const DOCUMENT_SORT_FIELDS = [ { field: 'archive_serial_number', name: $localize`ASN` }, @@ -222,6 +223,10 @@ export class DocumentService extends AbstractPaperlessService { ) } + getHistory(id: number): Observable { + return this.http.get(this.getResourceUrl(id, 'history')) + } + bulkDownload( ids: number[], content = 'both', diff --git a/src-ui/src/app/services/settings.service.spec.ts b/src-ui/src/app/services/settings.service.spec.ts index ff0a9837b..71568dc4b 100644 --- a/src-ui/src/app/services/settings.service.spec.ts +++ b/src-ui/src/app/services/settings.service.spec.ts @@ -47,6 +47,7 @@ describe('SettingsService', () => { update_checking: { enabled: false, backend_setting: 'default' }, saved_views: { warn_on_unsaved_change: true }, notes_enabled: true, + auditlog_enabled: true, tour_complete: false, permissions: { default_owner: null, diff --git a/src/documents/models.py b/src/documents/models.py index 8e7a16a60..5cb35a8f7 100644 --- a/src/documents/models.py +++ b/src/documents/models.py @@ -882,7 +882,12 @@ class CustomFieldInstance(models.Model): if settings.AUDIT_LOG_ENABLED: - auditlog.register(Document, m2m_fields={"tags"}) + auditlog.register( + Document, + m2m_fields={"tags"}, + mask_fields=["content"], + exclude_fields=["modified"], + ) auditlog.register(Correspondent) auditlog.register(Tag) auditlog.register(DocumentType) diff --git a/src/documents/serialisers.py b/src/documents/serialisers.py index 26930ccec..c7e86a7bf 100644 --- a/src/documents/serialisers.py +++ b/src/documents/serialisers.py @@ -5,6 +5,7 @@ import zoneinfo from decimal import Decimal import magic +from auditlog.context import set_actor from celery import states from django.conf import settings from django.contrib.auth.models import Group @@ -746,7 +747,11 @@ class DocumentSerializer( for tag in instance.tags.all() if tag not in inbox_tags_not_being_added ] - super().update(instance, validated_data) + if settings.AUDIT_LOG_ENABLED: + with set_actor(self.user): + super().update(instance, validated_data) + else: + super().update(instance, validated_data) return instance def __init__(self, *args, **kwargs): diff --git a/src/documents/tests/test_api_documents.py b/src/documents/tests/test_api_documents.py index 0a94a5677..9ae0b8bc3 100644 --- a/src/documents/tests/test_api_documents.py +++ b/src/documents/tests/test_api_documents.py @@ -316,6 +316,133 @@ class TestDocumentApi(DirectoriesMixin, DocumentConsumeDelayMixin, APITestCase): response = self.client.get(f"/api/documents/{doc.pk}/thumb/") self.assertEqual(response.status_code, status.HTTP_404_NOT_FOUND) + def test_document_history_action(self): + """ + GIVEN: + - Document + WHEN: + - Document is updated + THEN: + - Audit log contains changes + """ + doc = Document.objects.create( + title="First title", + checksum="123", + mime_type="application/pdf", + ) + self.client.force_login(user=self.user) + self.client.patch( + f"/api/documents/{doc.pk}/", + {"title": "New title"}, + format="json", + ) + + response = self.client.get(f"/api/documents/{doc.pk}/history/") + self.assertEqual(response.status_code, status.HTTP_200_OK) + self.assertEqual(len(response.data), 2) + self.assertEqual(response.data[0]["actor"]["id"], self.user.id) + self.assertEqual(response.data[0]["action"], "update") + self.assertEqual( + response.data[0]["changes"], + {"title": ["First title", "New title"]}, + ) + + def test_document_history_action_w_custom_fields(self): + """ + GIVEN: + - Document with custom fields + WHEN: + - Document is updated + THEN: + - Audit log contains custom field changes + """ + doc = Document.objects.create( + title="First title", + checksum="123", + mime_type="application/pdf", + ) + custom_field = CustomField.objects.create( + name="custom field str", + data_type=CustomField.FieldDataType.STRING, + ) + self.client.force_login(user=self.user) + self.client.patch( + f"/api/documents/{doc.pk}/", + data={ + "custom_fields": [ + { + "field": custom_field.pk, + "value": "custom value", + }, + ], + }, + format="json", + ) + + response = self.client.get(f"/api/documents/{doc.pk}/history/") + self.assertEqual(response.status_code, status.HTTP_200_OK) + self.assertEqual(response.data[1]["actor"]["id"], self.user.id) + self.assertEqual(response.data[1]["action"], "create") + self.assertEqual( + response.data[1]["changes"], + { + "custom_fields": { + "type": "custom_field", + "field": "custom field str", + "value": "custom value", + }, + }, + ) + + @override_settings(AUDIT_LOG_ENABLED=False) + def test_document_history_action_disabled(self): + """ + GIVEN: + - Audit log is disabled + WHEN: + - Document is updated + - Audit log is requested + THEN: + - Audit log returns HTTP 400 Bad Request + """ + doc = Document.objects.create( + title="First title", + checksum="123", + mime_type="application/pdf", + ) + self.client.force_login(user=self.user) + self.client.patch( + f"/api/documents/{doc.pk}/", + {"title": "New title"}, + format="json", + ) + + response = self.client.get(f"/api/documents/{doc.pk}/history/") + self.assertEqual(response.status_code, status.HTTP_400_BAD_REQUEST) + + def test_document_history_insufficient_perms(self): + """ + GIVEN: + - Audit log is disabled + WHEN: + - Document is updated + - Audit log is requested + THEN: + - Audit log returns HTTP 400 Bad Request + """ + user = User.objects.create_user(username="test") + user.user_permissions.add(*Permission.objects.filter(codename="view_document")) + self.client.force_login(user=user) + doc = Document.objects.create( + title="First title", + checksum="123", + mime_type="application/pdf", + owner=user, + ) + + response = self.client.get(f"/api/documents/{doc.pk}/history/") + self.assertEqual(response.status_code, status.HTTP_403_FORBIDDEN) + def test_document_filters(self): doc1 = Document.objects.create( title="none1", diff --git a/src/documents/tests/test_api_uisettings.py b/src/documents/tests/test_api_uisettings.py index 2cb6af6f2..0a52ea41c 100644 --- a/src/documents/tests/test_api_uisettings.py +++ b/src/documents/tests/test_api_uisettings.py @@ -39,6 +39,7 @@ class TestApiUiSettings(DirectoriesMixin, APITestCase): { "app_title": None, "app_logo": None, + "auditlog_enabled": True, "update_checking": { "backend_setting": "default", }, diff --git a/src/documents/tests/test_file_handling.py b/src/documents/tests/test_file_handling.py index a924e377b..fe5a5b589 100644 --- a/src/documents/tests/test_file_handling.py +++ b/src/documents/tests/test_file_handling.py @@ -4,6 +4,7 @@ import tempfile from pathlib import Path from unittest import mock +from auditlog.context import disable_auditlog from django.conf import settings from django.contrib.auth.models import User from django.db import DatabaseError @@ -143,7 +144,9 @@ class TestFileHandling(DirectoriesMixin, FileSystemAssertsMixin, TestCase): # Set a correspondent and save the document document.correspondent = Correspondent.objects.get_or_create(name="test")[0] - with mock.patch("documents.signals.handlers.Document.objects.filter") as m: + with mock.patch( + "documents.signals.handlers.Document.objects.filter", + ) as m, disable_auditlog(): m.side_effect = DatabaseError() document.save() @@ -557,20 +560,21 @@ class TestFileHandling(DirectoriesMixin, FileSystemAssertsMixin, TestCase): @override_settings(FILENAME_FORMAT="{title}") @mock.patch("documents.signals.handlers.Document.objects.filter") def test_no_update_without_change(self, m): - doc = Document.objects.create( - title="document", - filename="document.pdf", - archive_filename="document.pdf", - checksum="A", - archive_checksum="B", - mime_type="application/pdf", - ) - Path(doc.source_path).touch() - Path(doc.archive_path).touch() + with disable_auditlog(): + doc = Document.objects.create( + title="document", + filename="document.pdf", + archive_filename="document.pdf", + checksum="A", + archive_checksum="B", + mime_type="application/pdf", + ) + Path(doc.source_path).touch() + Path(doc.archive_path).touch() - doc.save() + doc.save() - m.assert_not_called() + m.assert_not_called() class TestFileHandlingWithArchive(DirectoriesMixin, FileSystemAssertsMixin, TestCase): diff --git a/src/documents/views.py b/src/documents/views.py index 5841649d0..8e58d9019 100644 --- a/src/documents/views.py +++ b/src/documents/views.py @@ -18,6 +18,7 @@ import pathvalidate from django.apps import apps from django.conf import settings from django.contrib.auth.models import User +from django.contrib.contenttypes.models import ContentType from django.db import connections from django.db.migrations.loader import MigrationLoader from django.db.migrations.recorder import MigrationRecorder @@ -105,6 +106,7 @@ from documents.matching import match_storage_paths from documents.matching import match_tags from documents.models import Correspondent from documents.models import CustomField +from documents.models import CustomFieldInstance from documents.models import Document from documents.models import DocumentType from documents.models import Note @@ -729,6 +731,66 @@ class DocumentViewSet( ] return Response(links) + @action(methods=["get"], detail=True, name="Audit Trail") + def history(self, request, pk=None): + if not settings.AUDIT_LOG_ENABLED: + return HttpResponseBadRequest("Audit log is disabled") + try: + doc = Document.objects.get(pk=pk) + if not request.user.has_perm("auditlog.view_logentry") or ( + doc.owner is not None and doc.owner != request.user + ): + return HttpResponseForbidden( + "Insufficient permissions", + ) + except Document.DoesNotExist: # pragma: no cover + raise Http404 + + # documents + entries = [ + { + "id": entry.id, + "timestamp": entry.timestamp, + "action": entry.get_action_display(), + "changes": entry.changes, + "actor": ( + {"id": entry.actor.id, "username": entry.actor.username} + if entry.actor + else None + ), + } + for entry in LogEntry.objects.filter(object_pk=doc.pk).select_related( + "actor", + ) + ] + + # custom fields + for entry in LogEntry.objects.filter( + object_pk__in=doc.custom_fields.values_list("id", flat=True), + content_type=ContentType.objects.get_for_model(CustomFieldInstance), + ).select_related("actor"): + entries.append( + { + "id": entry.id, + "timestamp": entry.timestamp, + "action": entry.get_action_display(), + "changes": { + "custom_fields": { + "type": "custom_field", + "field": str(entry.object_repr).split(":")[0].strip(), + "value": str(entry.object_repr).split(":")[1].strip(), + }, + }, + "actor": ( + {"id": entry.actor.id, "username": entry.actor.username} + if entry.actor + else None + ), + }, + ) + + return Response(sorted(entries, key=lambda x: x["timestamp"], reverse=True)) + class SearchResultSerializer(DocumentSerializer, PassUserMixin): def to_representation(self, instance): @@ -1267,6 +1329,8 @@ class UiSettingsView(GenericAPIView): if general_config.app_logo is not None and len(general_config.app_logo) > 0: ui_settings["app_logo"] = general_config.app_logo + ui_settings["auditlog_enabled"] = settings.AUDIT_LOG_ENABLED + user_resp = { "id": user.id, "username": user.username, diff --git a/src/locale/en_US/LC_MESSAGES/django.po b/src/locale/en_US/LC_MESSAGES/django.po index 219a433be..6496b56b3 100644 --- a/src/locale/en_US/LC_MESSAGES/django.po +++ b/src/locale/en_US/LC_MESSAGES/django.po @@ -2,7 +2,7 @@ msgid "" msgstr "" "Project-Id-Version: paperless-ngx\n" "Report-Msgid-Bugs-To: \n" -"POT-Creation-Date: 2024-04-19 01:13-0700\n" +"POT-Creation-Date: 2024-04-19 01:15-0700\n" "PO-Revision-Date: 2022-02-17 04:17\n" "Last-Translator: \n" "Language-Team: English\n" @@ -25,27 +25,27 @@ msgstr "" msgid "owner" msgstr "" -#: documents/models.py:53 documents/models.py:897 +#: documents/models.py:53 documents/models.py:902 msgid "None" msgstr "" -#: documents/models.py:54 documents/models.py:898 +#: documents/models.py:54 documents/models.py:903 msgid "Any word" msgstr "" -#: documents/models.py:55 documents/models.py:899 +#: documents/models.py:55 documents/models.py:904 msgid "All words" msgstr "" -#: documents/models.py:56 documents/models.py:900 +#: documents/models.py:56 documents/models.py:905 msgid "Exact match" msgstr "" -#: documents/models.py:57 documents/models.py:901 +#: documents/models.py:57 documents/models.py:906 msgid "Regular expression" msgstr "" -#: documents/models.py:58 documents/models.py:902 +#: documents/models.py:58 documents/models.py:907 msgid "Fuzzy word" msgstr "" @@ -53,20 +53,20 @@ msgstr "" msgid "Automatic" msgstr "" -#: documents/models.py:62 documents/models.py:397 documents/models.py:1218 +#: documents/models.py:62 documents/models.py:397 documents/models.py:1223 #: paperless_mail/models.py:18 paperless_mail/models.py:93 msgid "name" msgstr "" -#: documents/models.py:64 documents/models.py:958 +#: documents/models.py:64 documents/models.py:963 msgid "match" msgstr "" -#: documents/models.py:67 documents/models.py:961 +#: documents/models.py:67 documents/models.py:966 msgid "matching algorithm" msgstr "" -#: documents/models.py:72 documents/models.py:966 +#: documents/models.py:72 documents/models.py:971 msgid "is insensitive" msgstr "" @@ -615,246 +615,246 @@ msgstr "" msgid "custom field instances" msgstr "" -#: documents/models.py:905 +#: documents/models.py:910 msgid "Consumption Started" msgstr "" -#: documents/models.py:906 +#: documents/models.py:911 msgid "Document Added" msgstr "" -#: documents/models.py:907 +#: documents/models.py:912 msgid "Document Updated" msgstr "" -#: documents/models.py:910 +#: documents/models.py:915 msgid "Consume Folder" msgstr "" -#: documents/models.py:911 +#: documents/models.py:916 msgid "Api Upload" msgstr "" -#: documents/models.py:912 +#: documents/models.py:917 msgid "Mail Fetch" msgstr "" -#: documents/models.py:915 +#: documents/models.py:920 msgid "Workflow Trigger Type" msgstr "" -#: documents/models.py:927 +#: documents/models.py:932 msgid "filter path" msgstr "" -#: documents/models.py:932 +#: documents/models.py:937 msgid "" "Only consume documents with a path that matches this if specified. Wildcards " "specified as * are allowed. Case insensitive." msgstr "" -#: documents/models.py:939 +#: documents/models.py:944 msgid "filter filename" msgstr "" -#: documents/models.py:944 paperless_mail/models.py:148 +#: documents/models.py:949 paperless_mail/models.py:148 msgid "" "Only consume documents which entirely match this filename if specified. " "Wildcards such as *.pdf or *invoice* are allowed. Case insensitive." msgstr "" -#: documents/models.py:955 +#: documents/models.py:960 msgid "filter documents from this mail rule" msgstr "" -#: documents/models.py:971 +#: documents/models.py:976 msgid "has these tag(s)" msgstr "" -#: documents/models.py:979 +#: documents/models.py:984 msgid "has this document type" msgstr "" -#: documents/models.py:987 +#: documents/models.py:992 msgid "has this correspondent" msgstr "" -#: documents/models.py:991 +#: documents/models.py:996 msgid "workflow trigger" msgstr "" -#: documents/models.py:992 +#: documents/models.py:997 msgid "workflow triggers" msgstr "" -#: documents/models.py:1002 +#: documents/models.py:1007 msgid "Assignment" msgstr "" -#: documents/models.py:1006 +#: documents/models.py:1011 msgid "Removal" msgstr "" -#: documents/models.py:1010 +#: documents/models.py:1015 msgid "Workflow Action Type" msgstr "" -#: documents/models.py:1016 +#: documents/models.py:1021 msgid "assign title" msgstr "" -#: documents/models.py:1021 +#: documents/models.py:1026 msgid "" "Assign a document title, can include some placeholders, see documentation." msgstr "" -#: documents/models.py:1030 paperless_mail/models.py:216 +#: documents/models.py:1035 paperless_mail/models.py:216 msgid "assign this tag" msgstr "" -#: documents/models.py:1039 paperless_mail/models.py:224 +#: documents/models.py:1044 paperless_mail/models.py:224 msgid "assign this document type" msgstr "" -#: documents/models.py:1048 paperless_mail/models.py:238 +#: documents/models.py:1053 paperless_mail/models.py:238 msgid "assign this correspondent" msgstr "" -#: documents/models.py:1057 +#: documents/models.py:1062 msgid "assign this storage path" msgstr "" -#: documents/models.py:1066 +#: documents/models.py:1071 msgid "assign this owner" msgstr "" -#: documents/models.py:1073 +#: documents/models.py:1078 msgid "grant view permissions to these users" msgstr "" -#: documents/models.py:1080 +#: documents/models.py:1085 msgid "grant view permissions to these groups" msgstr "" -#: documents/models.py:1087 +#: documents/models.py:1092 msgid "grant change permissions to these users" msgstr "" -#: documents/models.py:1094 +#: documents/models.py:1099 msgid "grant change permissions to these groups" msgstr "" -#: documents/models.py:1101 +#: documents/models.py:1106 msgid "assign these custom fields" msgstr "" -#: documents/models.py:1108 +#: documents/models.py:1113 msgid "remove these tag(s)" msgstr "" -#: documents/models.py:1113 +#: documents/models.py:1118 msgid "remove all tags" msgstr "" -#: documents/models.py:1120 +#: documents/models.py:1125 msgid "remove these document type(s)" msgstr "" -#: documents/models.py:1125 +#: documents/models.py:1130 msgid "remove all document types" msgstr "" -#: documents/models.py:1132 +#: documents/models.py:1137 msgid "remove these correspondent(s)" msgstr "" -#: documents/models.py:1137 +#: documents/models.py:1142 msgid "remove all correspondents" msgstr "" -#: documents/models.py:1144 +#: documents/models.py:1149 msgid "remove these storage path(s)" msgstr "" -#: documents/models.py:1149 +#: documents/models.py:1154 msgid "remove all storage paths" msgstr "" -#: documents/models.py:1156 +#: documents/models.py:1161 msgid "remove these owner(s)" msgstr "" -#: documents/models.py:1161 +#: documents/models.py:1166 msgid "remove all owners" msgstr "" -#: documents/models.py:1168 +#: documents/models.py:1173 msgid "remove view permissions for these users" msgstr "" -#: documents/models.py:1175 +#: documents/models.py:1180 msgid "remove view permissions for these groups" msgstr "" -#: documents/models.py:1182 +#: documents/models.py:1187 msgid "remove change permissions for these users" msgstr "" -#: documents/models.py:1189 +#: documents/models.py:1194 msgid "remove change permissions for these groups" msgstr "" -#: documents/models.py:1194 +#: documents/models.py:1199 msgid "remove all permissions" msgstr "" -#: documents/models.py:1201 +#: documents/models.py:1206 msgid "remove these custom fields" msgstr "" -#: documents/models.py:1206 +#: documents/models.py:1211 msgid "remove all custom fields" msgstr "" -#: documents/models.py:1210 +#: documents/models.py:1215 msgid "workflow action" msgstr "" -#: documents/models.py:1211 +#: documents/models.py:1216 msgid "workflow actions" msgstr "" -#: documents/models.py:1220 paperless_mail/models.py:95 +#: documents/models.py:1225 paperless_mail/models.py:95 msgid "order" msgstr "" -#: documents/models.py:1226 +#: documents/models.py:1231 msgid "triggers" msgstr "" -#: documents/models.py:1233 +#: documents/models.py:1238 msgid "actions" msgstr "" -#: documents/models.py:1236 +#: documents/models.py:1241 msgid "enabled" msgstr "" -#: documents/serialisers.py:114 +#: documents/serialisers.py:115 #, python-format msgid "Invalid regular expression: %(error)s" msgstr "" -#: documents/serialisers.py:417 +#: documents/serialisers.py:418 msgid "Invalid color." msgstr "" -#: documents/serialisers.py:1143 +#: documents/serialisers.py:1148 #, python-format msgid "File type %(type)s not supported" msgstr "" -#: documents/serialisers.py:1252 +#: documents/serialisers.py:1257 msgid "Invalid variable detected." msgstr ""