Activity Log and Access Control

Use the Activity Log to audit Case actions and configure permissions for Case Management.

Activity Log

Every Case operation is recorded in a tamper-proof audit trail.

Event	Description
Case Created	A new Case was created for the Profile.
Alert Created	A new Alert was added to the Case.
Case Check-in	An officer self-claimed the Case.
Case Reassign	The Case was reassigned to a different officer.
Case Status Change	The Case status was updated.
Case Decision	An Approve or Reject decision was submitted, including its comment, attachments, and conclusion.
Alert Status Change	An Alert was closed manually or when the Case was submitted.
Alert Expiring	An older Alert was superseded by a newer screening round.
Match Status Change	A Match was marked Positive or False, including the officer's comment.
Match Review Status Change	A Match's secondary-review status was updated.
Attachment Added	A file was attached to the Case.
Attachment Deleted	An attachment was removed from the Case.

Each entry records the operator, timestamp, and action details such as status changes, comments, and affected entities. Open the log from View Case Log on Case Detail or View Match Notes in the Alert Review Workstation.

Access Control

Case Management uses the following permission codes:

Permission	Controls
CASE_CHECKIN	Self-claiming a Case. Without this permission, the Check-in button is hidden.
CASE_REASSIGN	Reassigning Cases to other officers. Without this permission, the Reassign button is hidden.
CASE_SUBMIT	Submitting an Approve or Reject decision and adjudicating matches as Positive, False, or Reviewed.

Assignee-Only Write Protection

When a Case is Assigned, only the current assignee can make changes. The assignee can:

Mark matches as Positive or False.
Mark matches as Reviewed.
Close Alerts.
Submit the Case decision.

Other officers can view Case details in read-only mode. A backend distributed lock prevents concurrent modifications.