XiriGo Admin DocsAudit & Security
Audit logs, admin user management, session monitoring, login history, and IP tracking for full platform accountability.
Audit & Security
The Audit module provides complete transparency into all administrative actions performed on the XiriGo platform. Every change made through the admin panel is recorded, along with who made it, when, and from where. This module also manages admin user accounts and monitors active sessions.
Audit Logs
The audit log is an immutable record of every action performed by admin users on the platform.
Log Entry Fields
| Field | Description |
|---|---|
| Timestamp | Exact date and time of the action (UTC) |
| Actor | Admin user who performed the action (name and email) |
| Action | Type of action performed (create, update, delete, login, export, etc.) |
| Module | Which module the action was performed in (vendors, orders, settings, etc.) |
| Target | The specific entity affected (e.g., "Vendor: Acme Electronics", "Order: #12345") |
| Details | Specific changes made (before/after values for updates) |
| IP Address | IP address from which the action was performed |
| User Agent | Browser and device information |
Filtering Audit Logs
| Filter | Description |
|---|---|
| Actor | Filter by specific admin user |
| Action type | Filter by action (create, update, delete, login, logout, export) |
| Module | Filter by module (vendors, orders, finance, settings, etc.) |
| Date range | Filter by time period |
| IP address | Filter by source IP |
| Search | Free-text search across target names and details |
Example Audit Entries
| Timestamp | Actor | Action | Module | Target | Details |
|---|---|---|---|---|---|
| 2026-03-19 14:32:01 | [email protected] | Update | Settings | commission.default_rate | Changed from 12% to 10% |
| 2026-03-19 14:15:22 | [email protected] | Approve | Vendors | Vendor: Malta Crafts | Status: pending → active |
| 2026-03-19 13:48:05 | [email protected] | Refund | Orders | Order: #ORD-8842 | Refund EUR 45.00 (return approved) |
| 2026-03-19 12:30:00 | [email protected] | Login | Auth | - | IP: 85.232.x.x, Browser: Chrome 122 |
Audit logs are retained for a minimum of 2 years and cannot be modified or deleted by any user, including super administrators. This ensures compliance with regulatory requirements.
Admin User Management
Manage the admin accounts that have access to the Admin Panel.
Admin User List
| Column | Description |
|---|---|
| Name | Admin user's full name |
| Login email address | |
| Role | Assigned role (Super Admin, Operations Manager, etc.) |
| Status | Active, inactive, locked |
| Last Login | Most recent login timestamp |
| Created | Account creation date |
Creating an Admin User
Navigate to Audit > Admin Users and click Create Admin.
Provide:
- Full name — Admin's display name
- Email — Login email (must be unique)
- Role — Select from available roles (see Roles & Permissions)
- Temporary password — Set an initial password (the user must change it on first login)
The admin account is created and an invitation email is sent with login instructions.
Admin User Actions
| Action | Description |
|---|---|
| Edit | Update the admin's name, email, or role |
| Reset password | Generate a password reset link sent to the admin's email |
| Deactivate | Disable the account (prevents login, preserves audit history) |
| Reactivate | Re-enable a deactivated account |
| Delete | Permanently remove the account (audit history is preserved under the user's name) |
| Force logout | Invalidate all active sessions for this user |
You cannot deactivate or delete your own admin account. Another super administrator must perform this action.
Session Management
Monitor all active admin sessions on the platform:
Active Sessions
| Column | Description |
|---|---|
| User | Admin user name and email |
| Session Started | When the session was created (login time) |
| Last Activity | Most recent action performed in this session |
| IP Address | IP address of the session |
| Device | Browser and operating system |
| Location | Approximate geographic location (from IP) |
Session Actions
| Action | Description |
|---|---|
| Terminate | Force-end a specific session. The user is immediately logged out. |
| Terminate all | End all active sessions for a specific user (useful if an account is compromised) |
Session termination is instant. The affected user will see a "Session expired" message and will need to log in again.
Login History
Complete login history for all admin users:
| Column | Description |
|---|---|
| User | Admin user |
| Timestamp | Login attempt date and time |
| Status | Success or failure |
| Failure Reason | If failed: invalid password, account locked, account deactivated |
| IP Address | Source IP address |
| Device | Browser and OS |
| Location | Approximate location from IP geolocation |
Login Alerts
The system generates alerts for suspicious login activity:
| Alert | Trigger |
|---|---|
| New IP address | Login from an IP address not previously associated with the user |
| New device | Login from a browser/device not previously used |
| Multiple failures | 3+ consecutive failed login attempts |
| Account lockout | Account locked after 5 failed attempts |
| Off-hours login | Login outside of configured business hours |
| Concurrent sessions | Same user logged in from multiple locations simultaneously |
IP Tracking
Track and analyze IP addresses used to access the admin panel:
| Feature | Description |
|---|---|
| IP whitelist | Optionally restrict admin access to a list of approved IP addresses or ranges |
| IP blocklist | Block specific IP addresses from accessing the admin panel |
| Geographic restrictions | Restrict admin access to specific countries (default: Malta only) |
| VPN detection | Flag logins from known VPN/proxy IP addresses |
Configuring IP Restrictions
View the current IP restriction configuration.
Toggle IP whitelisting on. Add approved IP addresses or CIDR ranges. Only whitelisted IPs will be able to access the admin panel.
Block specific IP addresses or ranges that have been identified as suspicious.
Select which countries are allowed to access the admin panel. Logins from non-allowed countries are blocked.
Restrictions take effect immediately for new login attempts. Existing sessions are not affected.
Be cautious when enabling IP whitelisting. If you lock yourself out by misconfiguring the whitelist, you will need direct server access to reset the restriction.
Review the login history and IP tracking data regularly (at least weekly) to identify unauthorized access attempts or anomalous patterns.