Drupal is a registered trademark of Dries Buytaert
cms 2.1.3 — Update released for Drupal core (2.1.3)! drupal 10.5.11 — Update released for Drupal core (10.5.11)! drupal 11.3.11 — Update released for Drupal core (11.3.11)! drupal 11.2.13 — Update released for Drupal core (11.2.13)! drupal 10.6.10 — Update released for Drupal core (10.6.10)! cms 2.1.2 — Update released for Drupal core (2.1.2)! drupal 11.1.10 — Update released for Drupal core (11.1.10)! drupal 10.5.10 — Update released for Drupal core (10.5.10)! drupal 10.4.10 — Update released for Drupal core (10.4.10)! drupal 11.2.12 — Update released for Drupal core (11.2.12)! drupal 11.3.10 — Update released for Drupal core (11.3.10)! drupal 10.6.9 — Update released for Drupal core (10.6.9)! drupal 10.6.8 — Update released for Drupal core (10.6.8)! drupal 11.3.9 — Update released for Drupal core (11.3.9)! drupal 11.3.8 — Update released for Drupal core (11.3.8)! drupal 11.3.7 — Update released for Drupal core (11.3.7)! drupal 11.2.11 — Update released for Drupal core (11.2.11)! drupal 10.6.7 — Update released for Drupal core (10.6.7)! drupal 10.5.9 — Update released for Drupal core (10.5.9)! cms 2.1.1 — Update released for Drupal core (2.1.1)!
← All modules

audit_trail_webdav

Security covered
View on drupal.org

Audit Trail for WebDAV records every WebDAV operation in the Audit Trail chain, giving you a tamper-evident log of who did what over WebDAV.

It is a thin bridge. It subscribes to the events dispatched by the WebDAV module and writes each verb as a chained audit row, while keeping the two modules decoupled: WebDAV does not need to know about Audit Trail, and Audit Trail does not need to know about WebDAV. You can add or remove the bridge without touching either.

What it audits

Every WebDAV verb the upstream module dispatches:

  • PUT, recorded as create or update
  • DELETE, MKCOL, MOVE, COPY
  • the LOCK family: acquire, release, and operator force-release

Each row captures a normalized action, the resource path (webdav:[container]/[path]), and the operation context: the HTTP method, the destination for MOVE and COPY, the lock token, timeout and owner for the LOCK family, and before / after file metadata where available.

Keeps WebDAV URL tokens out of the log

When the WebDAV module authenticates by URL token, that token is part of the request path. The bridge keeps the request URI out of the audit row, so the token never lands in the log; the resource path is recorded separately, so nothing is lost.

Privacy

WebDAV operations are tied to a specific user, so all event data lands in the transient, GDPR-purgeable bucket and auto-purges at the short retention window. The permanent bucket stays empty.

Getting started

Install Audit Trail and WebDAV, then enable this module. It ships a ready-to-use chain that claims the audit_trail_webdav channel out of the box, at /admin/config/system/audit-trail/chains/audit_trail_webdav. Operators who want to route WebDAV events into a different chain can re-assign the channel there.

Requirements

Activity

Total releases
3
First release
Jun 2026
Latest release
5 days ago
Release cadence
0 days
Stability
0% stable

Release Timeline

Releases

Version Type Release date
1.0.0-alpha2 Pre-release Jun 8, 2026
1.0.0-alpha1 Pre-release Jun 8, 2026
1.x-dev Dev Jun 8, 2026