tests: cleanup structure

tests/07_audit.sql

@@ -0,0 +1,64 @@
+-- ============================================================================
+-- MORBAC PostgreSQL Extension - Audit Logging Tests
+-- ============================================================================
+-- This test file covers audit logging functionality including:
+-- - Enabling audit on tables
+-- - Auditing INSERT operations
+-- - Auditing UPDATE operations
+-- - Auditing DELETE operations
+-- - Audit log queries and reporting
+-- - Disabling audit
+--
+-- Prerequisites: Assumes 00_setup.sql has been run to set up base data
+-- ============================================================================
+
+\echo ''
+\echo '=== Audit Logging ==='
+
+-- Enable audit on user_roles table
+SELECT morbac.enable_audit('user_roles');
+
+\echo 'Audit trigger created for user_roles table'
+
+-- Perform some auditable operations
+INSERT INTO morbac.user_roles (user_id, role_id, org_id)
+VALUES (
+    'ffffffff-0000-0000-0000-000000000001'::uuid,
+    'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa',  -- employee role
+    '11111111-1111-1111-1111-111111111111'
+);
+
+-- Update an existing user_role
+UPDATE morbac.user_roles
+SET active = false
+WHERE user_id = 'aaaaaaaa-0000-0000-0000-000000000001'::uuid
+  AND role_id = 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa';
+
+-- Delete a user role
+DELETE FROM morbac.user_roles
+WHERE user_id = 'ffffffff-0000-0000-0000-000000000001'::uuid
+  AND role_id = 'aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa';
+
+\echo 'Audit log entries for user_roles operations:'
+SELECT
+    operation,
+    record_id,
+    CASE
+        WHEN old_data IS NOT NULL THEN old_data->>'active'
+        ELSE 'N/A'
+    END as old_active,
+    CASE
+        WHEN new_data IS NOT NULL THEN new_data->>'active'
+        ELSE 'N/A'
+    END as new_active,
+    session_user,
+    timestamp
+FROM morbac.audit_log
+WHERE table_name = 'user_roles'
+ORDER BY timestamp;
+
+\echo 'Disable audit on user_roles:'
+SELECT morbac.disable_audit('user_roles');
+
+\echo ''
+\echo '=== Audit Logging Tests Completed ==='