updated api

handlers/users.php

@@ -1,5 +1,7 @@
 <?php
 
+require_once __DIR__ . '/../lib/activity.php';
+
 $tokenRec       = require_valid_token();
 require_role(['admin', 'supervisor'], $tokenRec);
 
@@ -139,6 +141,9 @@ case 'POST':
             ':role' => $role, ':eid' => $entityID, ':mcp' => $mustChange, ':now' => $now,
         ]);
         $pdo->commit();
+
+        log_activity($pdo, $tokenRec, 'user_created', 'user', $userID, "Created $role user $username", ['role' => $role, 'entityID' => $entityID]);
+
         qdb_save($tmpDb, $lockFp);
 
         $svUsername = null;
@@ -219,6 +224,9 @@ case 'DELETE':
                 break;
         }
         $pdo->commit();
+
+        log_activity($pdo, $tokenRec, 'user_deleted', 'user', $targetUserID, "Deleted {$target['role']} user", ['role' => $target['role']]);
+
         qdb_save($tmpDb, $lockFp);
 
         json_success([]);