Feature: Audit Log

  Scenario: Audit log captures changes
    Given I login as "admin@perauset.org"
    When I update my profile with displayName "Audited Admin"
    And I send a GET request to "/audit-log?tableName=user"
    Then the response status should be 200
    And the audit log should contain an "UPDATE" entry for table "user"

  Scenario: Unpermissioned user cannot view audit log
    Given a user "noaudit@test.org" exists with roles "guest"
    And I login as "noaudit@test.org"
    When I send a GET request to "/audit-log"
    Then the response status should be 403