VAULT-39895: add attribution data for undelete and group version operations (#210)

* add attribution data for undelete and group version operations

* changie

---------

Co-authored-by: davidadeleon <ddeleon@hashicorp.com>

Author: davidadeleon

.changes/unreleased/ENHANCEMENTS-20251002-130608.yaml

@@ -0,0 +1,5 @@
+kind: ENHANCEMENTS
+body: Add attribution for undelete and group delete/undelete operations
+time: 2025-10-02T13:06:08.156615-04:00
+custom:
+    Issue: "210"

path_delete.go

@@ -117,13 +117,17 @@ func (b *versionedKVBackend) pathUndeleteWrite() framework.OperationFunc {
 			return nil, nil
 		}
 
+		//Get attribution info
+		attribution := getAttribution(req)
+
 		for _, verNum := range versions {
 			// If there is no version or the version is destroyed continue
 			lv := meta.Versions[uint64(verNum)]
 			if lv == nil || lv.Destroyed {
 				continue
 			}
 			lv.DeletionTime = nil
+			lv.DeletedBy = nil
 
 			if !config.IsDeleteVersionAfterDisabled() {
 				if dtime, ok := deletionTime(time.Now(), deleteVersionAfter(config), deleteVersionAfter(meta)); ok {
@@ -135,14 +139,19 @@ func (b *versionedKVBackend) pathUndeleteWrite() framework.OperationFunc {
 				}
 			}
 		}
+		attribution.Operation = "undelete"
+		meta.LastUpdatedBy = attribution
+
 		err = b.writeKeyMetadata(ctx, req.Storage, meta)
 		if err != nil {
 			return nil, err
 		}
+
 		marshaledVersions, err := json.Marshal(&versions)
 		if err != nil {
 			return nil, err
 		}
+
 		kvEvent(ctx, b.Backend, "undelete", "undelete/"+key, "data/"+key, true, 2,
 			"current_version", fmt.Sprintf("%d", meta.CurrentVersion),
 			"oldest_version", fmt.Sprintf("%d", meta.OldestVersion),
@@ -179,6 +188,9 @@ func (b *versionedKVBackend) pathDeleteWrite() framework.OperationFunc {
 			return nil, nil
 		}
 
+		// Get attribution info
+		attribution := getAttribution(req)
+
 		for _, verNum := range versions {
 			// If there is no latest version, or the latest version is already
 			// deleted or destroyed continue
@@ -199,8 +211,11 @@ func (b *versionedKVBackend) pathDeleteWrite() framework.OperationFunc {
 			}
 
 			lv.DeletionTime = ptypes.TimestampNow()
+			lv.DeletedBy = attribution
 		}
 
+		meta.LastUpdatedBy = attribution
+
 		err = b.writeKeyMetadata(ctx, req.Storage, meta)
 		if err != nil {
 			return nil, err