Audit Events: Add deletion of approval rules
Problem to solve
This audit is required because currently the changing of the approval rule event is captured however by simply deleting the approval rule we can bypass the need for changing it with no audit log.
The use-case for this is to provide a trail in the case of the approval rules being deleted in order to get a merge through the review process without specific intervention. This can be abused by a bad-actor/disgruntled employee to promote change without a review process. By simply deleting the approval rule with no audit event being sent.
Proposal
An audit event should be sent on the deletion of an approval rule.
This page may contain information related to upcoming products, features and functionality. It is important to note that the information presented is for informational purposes only, so please do not rely on the information for purchasing or planning purposes. Just like with all projects, the items mentioned on the page are subject to change or delay, and the development, release, and timing of any products, features, or functionality remain at the sole discretion of GitLab Inc.