What is the problem we are solving

While investigating this issue, we found it would be super helpful if we had a log of who deleted certain products.
Products in our system are never fully deleted, only soft-deleted.

We do currently log delete actions like this for example (in apps/openfoodnetwork/current/log/production.log):

I, [2024-05-06 05:40:46 #30283]  INFO -- : Started DELETE "/api/v0/products/30490" for 119.12.214.45 at 2024-05-06 05:40:46 +0000

But this only contains an IP address, which is not very helpful for determining who did it.
Also, it's possible some other actions could cause delete of a product (I haven't checked, but I can imagine delete of an enterprise would also result in products deleted).

Also, currently we don't have any guarantees of how long these logs are available on the server, and could be cleared after only a couple of days.

Success factors = expected outcome

At least a dev could find out who deleted a product.

Suggested solution

It was proposed in #12431 (comment) that saving to a log file is the best way to manage this. It could be added to the main log file, but I suggest a separate log.
This would be complemented by:

• Ensure logs are stored for 30 days ofn-install#927

We can probably add an ActiveRecord hook somewhere to catch most deletes of any record. It's a bit of extra work to track the user ID, but I think do-able (see proof of concept in PR), we could add to products to begin with.