<?php
/**
 * Access log for SSN reveals and document downloads (GLBA safeguards).
 *
 * @package mortgage_application
 */

namespace Mapp\Files;

use Mapp\Security\RateLimiter;

defined( 'ABSPATH' ) || exit;

class Access {

	const META = 'mapp_access_log';

	/**
	 * @param int    $id     Application ID.
	 * @param string $action download | reveal_ssn | export.
	 * @param string $target File ID or field.
	 * @param string $actor  user:ID or link:purpose.
	 */
	public static function log( $id, $action, $target, $actor ) {
		$log   = get_post_meta( $id, self::META, true );
		$log   = is_array( $log ) ? $log : array();
		$log[] = array(
			'time'   => time(),
			'action' => $action,
			'target' => $target,
			'actor'  => $actor,
			'ip'     => RateLimiter::client_ip(),
		);
		update_post_meta( $id, self::META, array_slice( $log, -200 ) );
	}

	/**
	 * @param int $id Application ID.
	 * @return array
	 */
	public static function entries( $id ) {
		$log = get_post_meta( $id, self::META, true );
		return is_array( $log ) ? $log : array();
	}
}