Skip to content

GitLab Next

  • Projects
  • Groups
  • Snippets
  • Help
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
GitLab
GitLab
  • Project overview
    • Project overview
    • Details
    • Activity
    • Releases
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
    • Locked Files
  • Issues 34,828
    • Issues 34,828
    • List
    • Boards
    • Labels
    • Service Desk
    • Milestones
    • Iterations
  • Merge Requests 1,217
    • Merge Requests 1,217
  • Requirements
    • Requirements
    • List
  • CI / CD
    • CI / CD
    • Pipelines
    • Jobs
    • Schedules
    • Test Cases
  • Security & Compliance
    • Security & Compliance
    • Dependency List
    • License Compliance
  • Operations
    • Operations
    • Metrics
    • Incidents
    • Environments
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • CI / CD
    • Code Review
    • Insights
    • Issue
    • Repository
    • Value Stream
  • Snippets
    • Snippets
  • Members
    • Members
  • Collapse sidebar
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
  • GitLab.org
  • GitLabGitLab
  • Issues
  • #7531

Closed
Open
Opened Sep 10, 2018 by Blair Lunceford@blunceford🐳Contributor

Track changes in merge request approval settings in the audit log

Problem to solve

Tracking changes in merge request approval settings in the audit log

Further details

Client proposed change in Zendesk ticket: https://gitlab.zendesk.com/agent/tickets/103355 (Internal use only)

They asked if the audit logs could address changes to required approvers (how many, enabled/disabled).

Important Note

As of %12.7 Administrators will be able to set instance-wide rules for MR approvals that will restrict these settings at the project level for any non-admins.

Currently scheduled for %12.8 is an iteration to bring this functionality to the group level for .com customers and will follow similar logic: only Group Owners can modify the settings at the project level.

This activity - the modification of MR approval settings - should still be logged, though this detail may affect how it's logged and with what supplemental data.

Proposal

We should log, at the group level the three most important details of the MR approval settings and iterate to include additional settings later. Those three settings, as defined in #39060 (closed) are:

  • Prevent approval of merge requests by merge request author
    • e.g. User modified Project to allow merge request authors to approve their own merge requests
    • e.g. User modified Project to deny merge request authors from approving their own merge requests
  • Prevent approval of merge requests by merge request committers
    • e.g. User modified Project to allow merge request committers to approve their own merge request
    • e.g. User modified Project to deny merge request authors from approving their own merge requests
  • Approvers List changes
    • e.g. User modified approvers for Project to 1 from 2
    • e.g. User modified approvers for Project to 4 from 2

These events should contain a default sort order of Newest to Oldest.

Links / references

Edited Jan 15, 2020 by Matt Gonzales
Assignee
Assign to
12.9
Milestone
12.9 (Past due)
Assign milestone
Time tracking
None
Due date
None
Reference: gitlab-org/gitlab#7531