Which User Disabled a Module?

On my production site, a User disabled the Homepage module, removing the majority of the site's front page.

1) How can I find out which User disabled the module?
2) How can I ensure that only Admins can enable/disable modules?
sandshakimiAsked:
Who is Participating?
 
oliverpoldenConnect With a Mentor Commented:
If your log doesn't go far that back then you will need to look at the log table in your backup. The table you need to look at is "watchdog".
0
 
oliverpoldenCommented:
If database logging is turned on then you can check that:
admin/reports/dblog
Reports > Recent log messages

To ensure that only admins can enable/disable modules, only give the administrator user role to administrators!

Kind regards,
Oliver
0
 
oliverpoldenCommented:
Also, I would recommend using backup and migrate module. You can set it to automatically backup the database every hour and only keep say 24 or 48 backups.

https://drupal.org/project/backup_migrate

Then in this case you could just restore the backup from an hour ago but remember than any changes (content added, users created etc.) will be lost from the past hour.

Oliver
0
Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

 
sandshakimiAuthor Commented:
admin/reports/dblog
Reports > Recent log messages

I got to this, now what am I looking for exactly?
0
 
oliverpoldenCommented:
If you filter by type system you should then see module disable messages together with the user.

Kind regards,
Oliver
0
 
itkadminCommented:
Check to see if the module was uninstalled. If it was only disabled, the data is still in the DB. Enable it and things will be back in place.

Fix your permissions. Only one person should be able to manage modules, if you really need more admins, have some sort of workflow process to keep track of who does what.

Use backup and migrate as mentioned above, or have a backup regime that backs up the DB directly. (I find B&M works fine). (We download the backed up DB and all the code and files every night and add them to the corporate backup regime)
0
 
sandshakimiAuthor Commented:
Ok, the incidenet occured on 11-20, between 3 - 4pm.

So it's been two days.

1) The dblog in the Admin interface doesn't go back that far.

2) I'm looking at one of our backup dumps, dated 11-20, 3pm. I imported into MySQL Workbench. I just don't know which table to check.

3) Also, how can I expand the dblog report in the Drupal GUI to retain messages for at least three days?
0
 
oliverpoldenCommented:
If you haven't already just re-enabled the homepage module then I would try that first as itkadmin suggested.

To change how many log records you keep go to:
Configuration > Development > Logging and errors

To check if the module is enabled in your backup you will need to check the "system" table which has a status column.

Something like: SELECT * FROM system WHERE name like "%homepage%";

Kind regards,
Oliver
0
 
sandshakimiAuthor Commented:
Ok, here's the result I got.

It seems it was already disabled at 3pm.

How can I find out which User disabled it?

Homepage Modulehomepage.JPG
0
 
oliverpoldenCommented:
You can't find out who disabled a module from the systems table. You need to look at the log as in my previous answers.
0
 
sandshakimiAuthor Commented:
The 1pm database showed the "homepage" module as enabled.

The 3pm database showed the "homepage" modules as disabled.

But doing a search for string "homepage" in the 3pm database in Watchdog table didn't return results.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.