From 8573698e330e4642c77a4f0cead175dd08e24d30 Mon Sep 17 00:00:00 2001
From: Meik <meik.drechsler@consulting4it.de>
Date: Tue, 17 Mar 2026 15:08:58 +0100
Subject: [PATCH] Log NTFS ensure details during data area fetch

---
 LiamWorkflowActivities/LiamWorkflowRuntime.cs | 60 +++++++++++++++++++
 1 file changed, 60 insertions(+)

diff --git a/LiamWorkflowActivities/LiamWorkflowRuntime.cs b/LiamWorkflowActivities/LiamWorkflowRuntime.cs
index 4b57bf7..1d4ae84 100644
--- a/LiamWorkflowActivities/LiamWorkflowRuntime.cs
+++ b/LiamWorkflowActivities/LiamWorkflowRuntime.cs
@@ -436,12 +436,72 @@ namespace LiamWorkflowActivities
                     return false;
                 }
 
+                LogAutomaticNtfsEnsureDebug(folderPath, ensureResult);
                 await ntfsArea.ResolvePermissionGroupsAsync(folderPath);
             }
 
             return true;
         }
 
+        private static void LogAutomaticNtfsEnsureDebug(string folderPath, ResultToken ensureResult)
+        {
+            if (ensureResult == null)
+                return;
+
+            LogEntry(
+                $"Automatic NTFS permission group ensure finished for '{folderPath}'. " +
+                $"CreatedGroups={ensureResult.createdGroups.Count}, " +
+                $"ReusedGroups={ensureResult.reusedGroups.Count}, " +
+                $"AddedAcls={ensureResult.addedAclEntries.Count}, " +
+                $"SkippedAcls={ensureResult.skippedAclEntries.Count}, " +
+                $"TraverseGroups={ensureResult.ensuredTraverseGroups.Count}, " +
+                $"Warnings={ensureResult.warnings.Count}, " +
+                $"ResultMessage='{ensureResult.resultMessage ?? string.Empty}'",
+                LogLevels.Debug);
+
+            if (ensureResult.createdGroups.Count > 0)
+            {
+                LogEntry(
+                    $"Automatic NTFS permission group ensure detected missing AD groups for '{folderPath}' and created them: {string.Join(", ", ensureResult.createdGroups)}",
+                    LogLevels.Debug);
+            }
+
+            if (ensureResult.reusedGroups.Count > 0)
+            {
+                LogEntry(
+                    $"Automatic NTFS permission group ensure reused existing AD groups for '{folderPath}': {string.Join(", ", ensureResult.reusedGroups)}",
+                    LogLevels.Debug);
+            }
+
+            if (ensureResult.addedAclEntries.Count > 0)
+            {
+                LogEntry(
+                    $"Automatic NTFS permission group ensure added missing ACL entries for '{folderPath}': {string.Join(", ", ensureResult.addedAclEntries)}",
+                    LogLevels.Debug);
+            }
+
+            if (ensureResult.skippedAclEntries.Count > 0)
+            {
+                LogEntry(
+                    $"Automatic NTFS permission group ensure kept existing ACL entries for '{folderPath}': {string.Join(", ", ensureResult.skippedAclEntries)}",
+                    LogLevels.Debug);
+            }
+
+            if (ensureResult.ensuredTraverseGroups.Count > 0)
+            {
+                LogEntry(
+                    $"Automatic NTFS permission group ensure touched traverse groups for '{folderPath}': {string.Join(", ", ensureResult.ensuredTraverseGroups)}",
+                    LogLevels.Debug);
+            }
+
+            if (ensureResult.warnings.Count > 0)
+            {
+                LogEntry(
+                    $"Automatic NTFS permission group ensure produced warnings for '{folderPath}': {string.Join(" | ", ensureResult.warnings)}",
+                    LogLevels.Debug);
+            }
+        }
+
         private static bool IsAdditionalConfigurationEnabled(cLiamProviderBase provider, string key)
         {
             if (provider?.AdditionalConfiguration == null || string.IsNullOrWhiteSpace(key))