M8: Datenexport pro Mandant

Neue Seite datenexport.php (Owner/Admin) laedt einen vollstaendigen JSON-Export des eigenen Mandanten herunter: Stammdaten, Einstellungen, Teilnehmer, Mitglieder mit Rolle, alle Ledger-Buchungen, Hinweise, CSV-Importe, Mail-Versandlog und Admin-Protokoll. Passwort- und Token-Hashes werden bewusst nicht exportiert; der Export selbst wird im Audit-Log protokolliert. Link von konto.php aus. Live getestet: eigens angelegter Test-Mandant, Export heruntergeladen, Header und JSON-Struktur geprueft, keine Passwoerter im Export gefunden. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-07-15 20:10:30 +02:00
parent 3917a11db0
commit f3045dbab9
6 changed files with 175 additions and 3 deletions
@@ -0,0 +1,82 @@
+<?php
+
+declare(strict_types=1);
+
+require_once __DIR__ . '/bootstrap.php';
+
+/**
+ * Assembles a full export of everything stored for one tenant (data
+ * portability / GDPR Art. 20). Excludes password_hash and token hashes;
+ * everything else that is tenant-scoped is included as-is.
+ *
+ * @return array<string, mixed>
+ */
+function app_export_tenant_data(PDO $pdo, int $tenantId): array
+{
+    $stmt = $pdo->prepare('SELECT id, slug, name, status, timezone, locale, currency_code, created_at, updated_at FROM tenants WHERE id = ?');
+    $stmt->execute([$tenantId]);
+    $tenant = $stmt->fetch();
+
+    $stmt = $pdo->prepare('SELECT * FROM tenant_settings WHERE tenant_id = ?');
+    $stmt->execute([$tenantId]);
+    $settings = $stmt->fetch();
+
+    $stmt = $pdo->prepare('SELECT * FROM participants WHERE tenant_id = ? ORDER BY id');
+    $stmt->execute([$tenantId]);
+    $participants = $stmt->fetchAll();
+
+    $stmt = $pdo->prepare(
+        'SELECT u.id, u.email, u.display_name, u.status, u.email_verified_at, u.last_login_at, u.created_at,
+                tm.role, tm.status AS membership_status, tm.invited_at, tm.joined_at
+         FROM tenant_memberships tm
+         JOIN users u ON u.id = tm.user_id
+         WHERE tm.tenant_id = ?
+         ORDER BY u.id'
+    );
+    $stmt->execute([$tenantId]);
+    $members = $stmt->fetchAll();
+
+    $stmt = $pdo->prepare('SELECT * FROM ledger_entries WHERE tenant_id = ? ORDER BY id');
+    $stmt->execute([$tenantId]);
+    $ledgerEntries = $stmt->fetchAll();
+
+    $stmt = $pdo->prepare('SELECT id, message, valid_from, valid_until, deleted_at, created_at FROM notices WHERE tenant_id = ? ORDER BY id');
+    $stmt->execute([$tenantId]);
+    $notices = $stmt->fetchAll();
+
+    $stmt = $pdo->prepare('SELECT id, original_filename, status, created_at, committed_at FROM payment_import_batches WHERE tenant_id = ? ORDER BY id');
+    $stmt->execute([$tenantId]);
+    $importBatches = $stmt->fetchAll();
+
+    $stmt = $pdo->prepare(
+        'SELECT r.id, r.batch_id, r.row_num, r.raw_name, r.amount_cents, r.booked_at, r.status
+         FROM payment_import_rows r
+         JOIN payment_import_batches b ON b.id = r.batch_id
+         WHERE b.tenant_id = ?
+         ORDER BY r.id'
+    );
+    $stmt->execute([$tenantId]);
+    $importRows = $stmt->fetchAll();
+
+    $stmt = $pdo->prepare('SELECT id, participant_id, template, subject, status, sent_at, error, created_at FROM outbound_emails WHERE tenant_id = ? ORDER BY id');
+    $stmt->execute([$tenantId]);
+    $outboundEmails = $stmt->fetchAll();
+
+    $stmt = $pdo->prepare('SELECT id, actor_user_id, action, subject_type, subject_id, metadata_json, ip, created_at FROM audit_log WHERE tenant_id = ? ORDER BY id');
+    $stmt->execute([$tenantId]);
+    $auditLog = $stmt->fetchAll();
+
+    return [
+        'exported_at' => date('c'),
+        'tenant' => $tenant ?: null,
+        'tenant_settings' => $settings ?: null,
+        'participants' => $participants,
+        'members' => $members,
+        'ledger_entries' => $ledgerEntries,
+        'notices' => $notices,
+        'payment_import_batches' => $importBatches,
+        'payment_import_rows' => $importRows,
+        'outbound_emails' => $outboundEmails,
+        'audit_log' => $auditLog,
+    ];
+}