New Audit Event: Compliance framework label on project changed
Release notes
Problem to solve
Users may change the compliance framework label on a project. This change could be potentially controversial or unintended, so organizations wish to be able to have a record of this happening. Today, there is no audit event created for any changes to this label.
Proposal
Create a new audit event in the audit log when a project's compliance framework label changes.
Implementation Plan
- Add
Auditable
concern toComplianceManagement::ComplianceFramework::ProjectSetting
.
As the join table betweenProject
andComplianceManagement::Framework
, the creation or destruction of a row represents when a framework is added or removed from a project. - Add specs to assert that the audit event is created when:
- A project has a new framework added to it.
- A project has a framework removed.
Edited by Max Woolf