Skip to content

Audit auditor role changes

sameer shaik requested to merge auditor-audit into master

What does this MR do and why?

This MR adds an audit event at eh instance level when a user is promoted or demoted as an auditor. Currently, we log this event for and admin user and this MR logs the event for auditor role changes.

By extending the audit logging to the 'Auditor' role, we can offer instance administrators a complete and transparent view of role changes within the platform. This will enhance security, accountability, and monitoring capabilities, ensuring that any changes to roles with access to sensitive data or functionalities are adequately tracked.

Screenshots or screen recordings

Screenshot_2023-11-09_at_8.22.02_PM

How to set up and validate locally

  1. In the GDK, navigate to http://localhost:3000/admin/users/ANY_USER_NAME
  2. Edit the user and switch the role to auditor
  3. Verify the audit event in the instance level audit events page: http://localhost:3000/admin/audit_logs
  4. Switch the user back to regular user
  5. Verify the audit event in the instance level audit events page: http://localhost:3000/admin/audit_logs

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Edited by sameer shaik

Merge request reports