Allow Auditor role to view project-level audit events view

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

Problem to solve

Currently, Auditor users have a mix of readonly access to various resources in a project. One of the biggest gaps is the Auditors inability to view a project's audit events. There is no access to a project's Audit Events view for an auditor user and the role is not customizable to grant this today.

Proposal

  • Grant access to a project audit events to Auditor users.
  • Show the Security & Compliance sidebar item in a project to Auditor users, but with only Audit Events as a sub-menu item.
  • Auditors should have full access to the audit events for a project.
  • Matching REST/GraphQL API access for Auditor users.

Further details

Edited by 🤖 GitLab Bot 🤖