Admin Action Log

Fixed

• The notification emails (sensitive changes, sign-in from a new IP address, failed sign-ins) only said "We're sorry, an error has occurred while generating this content." Their templates included the storefront email header and footer, which do not exist in the admin area where the emails are created. The templates now have their own layout with inline styles, and the header shows the store name ({{var store_name}}).
• System › Action Log › Dashboard showed a box ("[]") before its title: the admin gave it the icon of the main Dashboard, because the menu CSS class is built from the menu item ID. The menu item IDs now start with actionlog_ (the ACL resources and role permissions are unchanged).

Upgrade note

• If a notification setting uses a template created from version 1.0.0 in Marketing › Communications › Email Templates, remove its {Error in template processing} and footer_template lines or create it again with *Load Default Template*.

New

• Action log (System › Action Log › Action Log) of the creates, updates and deletes made by admin users, with the old and new value of each changed field, admin user, date, IP address, browser, store view or scope, admin action and path. Grid with filters, column controls, saved views, CSV/Excel XML export, colored action badges, "Open Item" links and mass delete.
• Item types: products, categories and product attributes; CMS pages and blocks; customers and customer groups; orders (status and state), order comments, invoices, credit memos and shipments; cart and catalog price rules and coupons; configuration settings (one entry per saved section and scope, with a field change per setting; unchanged values Magento stores on save and reordered multiselect values are skipped); admin users, roles and role permissions; websites, stores and store views; URL rewrites, tax rates and rules, widgets, email and newsletter templates, integrations, search terms and site maps. Optional logging of every other item saved in the admin. More types can be added in di.xml.
• Mass actions (with the number of selected items and the chosen options) and exports of grids, customers, orders and System › Export.
• Secrets are never logged (password, secret, token and API key fields); encrypted settings are stored encrypted and shown masked; optional IP masking; excluded fields and admin users.
• Log entry page with who/when/where, field differences (attribute labels, collapsible long texts, inline word differences), conflict detection for fields changed after the entry, "Already reverted" for fields back at their old value, and links between entries and their reverts.
• Revert of all or selected fields (EAV attributes per store view, configuration values per scope, other items through their resource model), with "Overwrite newer changes", in a database transaction, logged as a revert entry. Deleting items whose creation is reverted (CMS pages and blocks, URL rewrites). Restore of deleted CMS pages and blocks, customer groups, URL rewrites, price rules, tax rates and widgets, with the same ID when it is free.
• Login attempts (success, failed with reason, locked, sign-out) with grid and export.
• Active admin sessions of Magento_Security with "This is you", terminate one or all other sessions (logged); session history with start, end and end reason.
• Page visit history with page titles from the admin menu, time on page and session filter.
• Email notifications: sign-in from a new IP address (to the admin user), repeated failed sign-ins (throttled per username and time window) and changes of sensitive item types (one email per request).
• Dashboard with key figures, a 14-day activity chart, most active admin users, recent activity and failed sign-ins, quick links and retention.
• "Action History" tab on the admin user page (last 50 actions).
• Retention per log type (action log 30 days, login attempts 30, page visits 7, ended sessions 30; 0 = forever), daily cron job ti_actionlog_clean and bin/magento techimprovement:action-log:clean [--days] [--type] [--dry-run], in batches of 1,000 rows.
• ACL resources for viewing, reverting, terminating sessions and deleting entries; declarative schema; uninstall with --remove-data.