Skip to content
GitLab
Next
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • GitLab GitLab
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 44,761
    • Issues 44,761
    • List
    • Boards
    • Service Desk
    • Milestones
    • Iterations
    • Requirements
  • Merge requests 1,329
    • Merge requests 1,329
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Container Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Code review
    • Insights
    • Issue
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • GitLab.orgGitLab.org
  • GitLabGitLab
  • Issues
  • #276921
Closed
Open
Issue created Nov 05, 2020 by Sanad Liaquat@sliaquat🔴Maintainer0 of 6 checklist items completed0/6 checklist items

Add application logs and audit event logs when creating and revoking Personal Access token

Release notes

Problem to solve

This is a pre-requisite for #17176 (closed)

Currently, we do not log any attempts to create a personal access token. Since we need to add an ability for the admin user to create personal access tokens for other users, we would like track any successful or failed attempts. See this thread for related conversation.

Intended users

User experience goal

Proposal

Add logging to PersonalAccessTokens::CreateService and PersonalAccessTokens::RevokeService. Since audit event logs is an Enterprise feature, also create application logs.

Further details

Permissions and Security

Documentation

Availability & Testing

What does success look like, and how can we measure that?

What is the type of buyer?

Is this a cross-stage feature?

Links / references

Edited Nov 05, 2020 by Sanad Liaquat
Assignee
Assign to
Time tracking