[Bug]: Unable to view items in Audit Log without Super Admin Access

[yusuf-basith]

Snipe-IT Version

8.4.1

PHP Version

8.3.20

Composer Version

2.8.12

MySQL/MariaDB version

MySQL 5.7

How did you install Snipe-IT?

Git install

Is this a fresh install or an upgrade?

Upgrade

What happened?

The Audit Log report is populated with items only when the user has Super Admin Access.
We have Multi Companies Support enabled.

With Admin Access or with Report Access, the Audit Log Page is visible and reacheable.
However, the items are not loaded. It says No matching records found.

With Admin Access or with Report Access, I expect to see the Audit Logs for my Company.

What browsers are you seeing the problem on?

No response

Can you reproduce this on the public demo?

N/A

Do you have full multiple company support enabled?

Yes

If you have full multiple company support enabled, do you have location scoping to company enabled?

Yes

Application log output

Can't find anything related to this in the logs.

Browser console output

Common Issues

• I have searched this repo for existing issues related to my issue (including closed issues)
• My APP_URL is set correctly in my .env file (including http or https and no trailing slash)
• I have searched the official Snipe-IT documentation and have checked the Common Issues documentation (where applicable)
• I have run database migrations (where applicable).
• I have attached screenshots and/or videos of the issue (where applicable)

Code of Conduct

• I agree to follow this project's Code of Conduct

[snipe]

Pretty sure this was already fixed on master

[yusuf-basith]

I did a git pull origin master to pull the latest files from master and ran the php upgrade.php to complete all the upgrades and I am still facing the issue.

Could you please tell me which files to look for the fix?
Just to ensure that the particular file(s) are correct in my installation.

[yusuf-basith]

It is not only at the Audit Log, it is also at the Audit tab of view Asset.

[snipe]

I cannot reproduce this. (You can see by the UI that this user is not a superuser.)

[yusuf-basith]

As I told you earlier, we have Multi Company Support enabled.

I turned it off and checked the issue, the issue is gone and the users with Admin/Report access are able to view Audit Logs.
Only when I turn on the Multi Company support the users are not able to see the Audit Logs.

I believe this could shed some light on my situation.
Could you please help me to troubleshoot and fix the issue in my instance?

[yusuf-basith]

Out of curiosity, I checked my database.

In the table action_logs the column company_id is always NULL for the action_type audit.

Could you please investigate this Bug with this additional information?

SELECT * FROM action_logs WHERE action_type = 'audit';

/* Affected rows: 0  Found rows: 8 063  Warnings: 0  Duration for 1 query: 0,000 sec. (+ 0,015 sec. network) */

SELECT * FROM action_logs WHERE action_type = 'audit' AND company_id IS null;

/* Affected rows: 0  Found rows: 8 063  Warnings: 0  Duration for 1 query: 0,000 sec. (+ 0,032 sec. network) */

SELECT * FROM action_logs WHERE action_type = 'audit' AND company_id IS NOT null;

/* Affected rows: 0  Found rows: 0  Warnings: 0  Duration for 1 query: 0,016 sec. */