Skip to content

Audit Event availability for all roles

Overview

Audit Events (https://docs.gitlab.com/ee/administration/audit_events.html#audit-events) is available for Owners (and Maintainers at the project-level) and not presented in the UI for other roles. This limits the number of users who are able to access this feature.

In order to increase usage of this, we could consider opening up Audit Events for all users - but only presenting audit events for the current user for users below Owner/Maintainer.

Proposal

For instances/groups/projects eligible to use Audit Events, present Audit Events in the UI for all users.

  • At the group level, a non-member/Guest/Reporter/Developer/Maintainer should be able to open Audit Events but only see their own Audit Events. They should not be able to search for events from other members.
  • At the project level, this same behavior should apply to non-members/Guest/Reporter/Developer roles.

Technical implementation

backend

  1. Remove admin-only authentication to the audit events api (Project, Group)

frontend

  1. Update the Settings navbar to expose the Audit Events link to all users: (Project, Group).
  2. In case of non-admin users, pass the author_id in the audit events api (Project, Group)
Edited by Aishwarya Subramanian