Fix: audit log records customer password changes by others

locale/admin-docs.pot

@@ -8,7 +8,7 @@ msgid ""
 msgstr ""
 "Project-Id-Version: Zammad Admin Documentation pre-release\n"
 "Report-Msgid-Bugs-To: \n"
-"POT-Creation-Date: 2026-09-08 13:24+0200\n"
+"POT-Creation-Date: 2026-09-10 08:44+0200\n"
 "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n"
 "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
 "Language-Team: LANGUAGE <LL@li.org>\n"
@@ -2984,7 +2984,7 @@ msgstr ""
 #: ../manage/trigger.rst:108
 #: ../manage/webhook/examples/generic-notifications-trigger.rst:32
 #: ../misc/object-conditions/basics.rst:66
-#: ../system/audit-logs.rst:63
+#: ../system/audit-logs.rst:66
 #: ../system/core-workflows/how-do-they-work.rst:60
 #: ../system/core-workflows/learn-by-example.rst:58
 #: ../system/core-workflows/learn-by-example.rst:113
@@ -10936,7 +10936,7 @@ msgstr ""
 
 #: ../manage/time-accounting.rst:155
 #: ../manage/time-accounting.rst:169
-#: ../system/audit-logs.rst:76
+#: ../system/audit-logs.rst:79
 msgid "Created at"
 msgstr ""
 
@@ -14656,7 +14656,6 @@ msgid "**All users** are notified about:"
 msgstr ""
 
 #: ../misc/system-notifications.rst:20
-#: ../system/audit-logs.rst:33
 msgid "Password changes"
 msgstr ""
 
@@ -19623,90 +19622,94 @@ msgid "Knowledge bases and their languages"
 msgstr ""
 
 #: ../system/audit-logs.rst:31
-msgid "User account changes (only changes for agents and admins accounts are recorded):"
+msgid "User account changes (only changes for agents and admins accounts are recorded, with one exception below):"
 msgstr ""
 
 #: ../system/audit-logs.rst:34
+msgid "Password changes. For customers, only changes made by another user or an admin are recorded. Password resets done by customers themselves are not recorded."
+msgstr ""
+
+#: ../system/audit-logs.rst:37
 msgid "Activation and deactivation of accounts"
 msgstr ""
 
-#: ../system/audit-logs.rst:35
+#: ../system/audit-logs.rst:38
 msgid "Added or removed roles and group permissions"
 msgstr ""
 
-#: ../system/audit-logs.rst:36
+#: ../system/audit-logs.rst:39
 msgid "Two-factor authentication changes"
 msgstr ""
 
-#: ../system/audit-logs.rst:38
+#: ../system/audit-logs.rst:41
 msgid "Session events:"
 msgstr ""
 
-#: ../system/audit-logs.rst:40
+#: ../system/audit-logs.rst:43
 msgid "Taking over another user's session via \"switch to user\" (``View from user's perspective``) and switching back."
 msgstr ""
 
-#: ../system/audit-logs.rst:43
+#: ../system/audit-logs.rst:46
 msgid "An arrow in the **Updated by** column (e.g. \"John Doe → Jane Doe\") indicates that the action was performed via \"switch to user\"."
 msgstr ""
 
-#: ../system/audit-logs.rst:47
+#: ../system/audit-logs.rst:50
 msgid "Viewing Audit Log Entries"
 msgstr ""
 
-#: ../system/audit-logs.rst:49
+#: ../system/audit-logs.rst:52
 msgid "By default, the audit log is sorted by **Created at**, with the newest entries shown first. The **Created at** timestamp indicates when the audit log entry was created, not when the affected object was created. Click any column heading to change the sort order. Use the **Search for audit logs** bar to find entries. The list displays the following information:"
 msgstr ""
 
-#: ../system/audit-logs.rst:58
+#: ../system/audit-logs.rst:61
 msgid "Updated by"
 msgstr ""
 
-#: ../system/audit-logs.rst:56
+#: ../system/audit-logs.rst:59
 msgid "The user who performed the action. If the action was performed by using the ``View from user's perspective`` action, you see both involved users like this: Initiating user → Taken-over user."
 msgstr ""
 
-#: ../system/audit-logs.rst:61
+#: ../system/audit-logs.rst:64
 msgid "The action that was performed. Available actions include **create object**, **update object**, **delete object**, **switch to user** and **switch back to user**."
 msgstr ""
 
-#: ../system/audit-logs.rst:67
+#: ../system/audit-logs.rst:70
 msgid "Object Type"
 msgstr ""
 
-#: ../system/audit-logs.rst:66
+#: ../system/audit-logs.rst:69
 msgid "The type of object that was changed. If the action was **switch to user** or **switch back to user**, it shows the affected users here as well."
 msgstr ""
 
-#: ../system/audit-logs.rst:70
+#: ../system/audit-logs.rst:73
 msgid "Object name"
 msgstr ""
 
-#: ../system/audit-logs.rst:70
+#: ../system/audit-logs.rst:73
 msgid "The name of the object that was changed."
 msgstr ""
 
-#: ../system/audit-logs.rst:73
+#: ../system/audit-logs.rst:76
 msgid "Source IP"
 msgstr ""
 
-#: ../system/audit-logs.rst:73
+#: ../system/audit-logs.rst:76
 msgid "The IP address from which the action was performed."
 msgstr ""
 
-#: ../system/audit-logs.rst:76
+#: ../system/audit-logs.rst:79
 msgid "The date and time when the entry was created."
 msgstr ""
 
-#: ../system/audit-logs.rst:78
+#: ../system/audit-logs.rst:81
 msgid "Clicking an entry opens a read-only dialog with the recorded changes. Lines prefixed with ``-`` and highlighted in red show previous values. Lines prefixed with ``+`` and highlighted in green show new values. Session takeover entries show **No changes** because they record the event rather than an object change."
 msgstr ""
 
-#: ../system/audit-logs.rst:84
+#: ../system/audit-logs.rst:87
 msgid "Retention"
 msgstr ""
 
-#: ../system/audit-logs.rst:86
+#: ../system/audit-logs.rst:89
 msgid "Zammad automatically removes audit log entries older than 12 months. This retention period is not configurable. The cleanup runs once a day."
 msgstr ""
 

system/audit-logs.rst

@@ -28,9 +28,12 @@ Configuration adjustments and changes of data in the admin area:
 - S/MIME, PGP and SSL certificates
 - Knowledge bases and their languages
 
-User account changes (only changes for agents and admins accounts are recorded):
+User account changes (only changes for agents and admins accounts are
+recorded, with one exception below):
 
-- Password changes
+- Password changes. For customers, only changes made by another user or an
+  admin are recorded. Password resets done by customers themselves are not
+  recorded.
 - Activation and deactivation of accounts
 - Added or removed roles and group permissions
 - Two-factor authentication changes