Church Cashbook Admin Manual

Append-only record of all significant application events. Cannot be edited or deleted by any user.

Why read-only

The audit log records all significant application events — transaction changes, role assignments, Gift Aid operations, and system configuration changes. It is deliberately write-once and cannot be edited or deleted through the web interface by any user, including superadmins. This protects the integrity of the audit trail for governance and independent examination purposes.

How to use

Access via Admin → Audit logs. Entries can be filtered by church, user, event type, and date range. Use the activity log to answer questions like "who voided this transaction?" or "when was this user's role changed?".

For server-level events (PHP errors, security violations, failed logins) use the file-based error logs accessible via Admin → System Info — these are a separate logging layer from the activity log.