feat:DB 트리거 기반 데이터 변경 추적 시스템 구현

Phase 1: DB 기반 구축
- trigger_audit_logs 테이블 (RANGE 파티셔닝 15개, 3개 인덱스)
- 789개 MySQL AFTER 트리거 (263 테이블 × INSERT/UPDATE/DELETE)
- SetAuditSessionVariables 미들웨어 (@sam_actor_id, @sam_session_info)

Phase 2: 복구 메커니즘
- TriggerAuditLog 모델, TriggerAuditLogService, AuditRollbackService
- 6개 API 엔드포인트 (index, show, stats, history, rollback-preview, rollback)
- FormRequest 검증 (TriggerAuditLogIndexRequest, TriggerAuditRollbackRequest)

Phase 3: 관리 도구
- v_unified_audit VIEW (APP + TRIGGER 통합, COLLATE 처리)
- audit:partitions 커맨드 (파티션 추가/삭제, dry-run)
- audit:triggers 커맨드 (트리거 재생성, 테이블별/전체)
- 월 1회 파티션 자동 관리 스케줄러 등록

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-02-09 09:17:15 +09:00
parent ee6794be1a
commit d07bad16df
16 changed files with 1167 additions and 1 deletions

View File

@@ -0,0 +1,83 @@
<?php
namespace App\Http\Controllers\Api\V1\Audit;
use App\Helpers\ApiResponse;
use App\Http\Controllers\Controller;
use App\Http\Requests\Audit\TriggerAuditLogIndexRequest;
use App\Http\Requests\Audit\TriggerAuditRollbackRequest;
use App\Services\Audit\AuditRollbackService;
use App\Services\Audit\TriggerAuditLogService;
class TriggerAuditLogController extends Controller
{
public function __construct(
protected TriggerAuditLogService $service,
protected AuditRollbackService $rollbackService,
) {}
/**
* 트리거 감사 로그 목록 조회
*/
public function index(TriggerAuditLogIndexRequest $request)
{
return ApiResponse::handle(function () use ($request) {
return $this->service->paginate($request->validated());
}, __('message.fetched'));
}
/**
* 트리거 감사 로그 상세 조회
*/
public function show(int $id)
{
return ApiResponse::handle(function () use ($id) {
return \App\Models\Audit\TriggerAuditLog::findOrFail($id);
}, __('message.fetched'));
}
/**
* 특정 레코드의 변경 이력
*/
public function recordHistory(string $tableName, string $rowId)
{
return ApiResponse::handle(function () use ($tableName, $rowId) {
return $this->service->recordHistory($tableName, $rowId);
}, __('message.fetched'));
}
/**
* 통계 조회
*/
public function stats()
{
return ApiResponse::handle(function () {
$tenantId = request()->query('tenant_id');
return $this->service->stats($tenantId ? (int) $tenantId : null);
}, __('message.fetched'));
}
/**
* 롤백 SQL 미리보기
*/
public function rollbackPreview(int $id)
{
return ApiResponse::handle(function () use ($id) {
return [
'audit_id' => $id,
'rollback_sql' => $this->rollbackService->generateRollbackSQL($id),
];
}, __('message.fetched'));
}
/**
* 롤백 실행
*/
public function rollbackExecute(TriggerAuditRollbackRequest $request, int $id)
{
return ApiResponse::handle(function () use ($id) {
return $this->rollbackService->executeRollback($id);
}, __('message.updated'));
}
}

View File

@@ -0,0 +1,27 @@
<?php
namespace App\Http\Middleware;
use Closure;
use Illuminate\Http\Request;
use Illuminate\Support\Facades\DB;
use Symfony\Component\HttpFoundation\Response;
class SetAuditSessionVariables
{
public function handle(Request $request, Closure $next): Response
{
if (auth()->check()) {
DB::statement('SET @sam_actor_id = ?', [auth()->id()]);
DB::statement('SET @sam_session_info = ?', [
json_encode([
'ip' => $request->ip(),
'ua' => mb_substr((string) $request->userAgent(), 0, 255),
'route' => $request->route()?->getName(),
], JSON_UNESCAPED_UNICODE),
]);
}
return $next($request);
}
}

View File

@@ -0,0 +1,36 @@
<?php
namespace App\Http\Requests\Audit;
use App\Http\Requests\Traits\HasPagination;
use Illuminate\Foundation\Http\FormRequest;
class TriggerAuditLogIndexRequest extends FormRequest
{
use HasPagination;
protected int $maxSize = 200;
public function authorize(): bool
{
return true;
}
public function rules(): array
{
return [
'page' => 'nullable|integer|min:1',
'size' => 'nullable|integer|min:1',
'table_name' => 'nullable|string|max:64',
'row_id' => 'nullable|string|max:64',
'dml_type' => 'nullable|string|in:INSERT,UPDATE,DELETE',
'tenant_id' => 'nullable|integer|min:1',
'actor_id' => 'nullable|integer|min:1',
'db_user' => 'nullable|string|max:100',
'from' => 'nullable|date',
'to' => 'nullable|date|after_or_equal:from',
'sort' => 'nullable|string|in:created_at,id',
'order' => 'nullable|string|in:asc,desc',
];
}
}

View File

@@ -0,0 +1,20 @@
<?php
namespace App\Http\Requests\Audit;
use Illuminate\Foundation\Http\FormRequest;
class TriggerAuditRollbackRequest extends FormRequest
{
public function authorize(): bool
{
return true;
}
public function rules(): array
{
return [
'confirm' => 'required|boolean|accepted',
];
}
}