Exclude SPP audit events from certain tiers
Problem to solve
We currently emit a number of audit events anytime someone configures SPP. We need to make sure these audit events are only emitted in accordance with the expectations set by the overall feature, Category:Audit Events.
Proposal
Based on the guidance in this thread (internal only - 90 days), here's what our proposed solution looks like:
Current tier capabilities for Audit Events:
- Free: Sign-in events only
- Premium: Free features + audit event reports (project/group level) + API access
- Ultimate: Premium features + third-party streaming capabilities
Recommendation for SPP events: Based on our tiering strategy, SPP audit events should be excluded from Free tier and available only for Premium and Ultimate tiers.
Implementation plan
Implementation considerations:
- You can configure audit event storage vs. streaming only based on anticipated volume of audit events (see this doc page for all audit event types we capture at the moment and whether they are saved in the database or streaming only).
- Audit event capture should be done in EE.
TBD
Edited by 🤖 GitLab Bot 🤖