Allow Auditor role to view project-level audit events view
Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.
Problem to solve
Currently, Auditor users have a mix of readonly access to various resources in a project. One of the biggest gaps is the Auditors inability to view a project's audit events. There is no access to a project's Audit Events view for an auditor user and the role is not customizable to grant this today.
Proposal
- Grant access to a project audit events to Auditor users.
- Show the
Security & Compliancesidebar item in a project to Auditor users, but with onlyAudit Eventsas a sub-menu item. - Auditors should have full access to the audit events for a project.
- Matching REST/GraphQL API access for Auditor users.
Further details
Edited by 🤖 GitLab Bot 🤖