Skip to content

Auditing framework assign and unassign to a project

Hitesh Raghuvanshi requested to merge 464159-fix-audit-events into master

What does this MR do and why?

Assigning and unassigning a framework to a project was not being audited. This MR introduces the audit events for those operations.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

image

How to set up and validate locally

  1. For this you need a group with Ultimate license.
  2. Under the group(lets name it toolbox), create atleast 2 compliance frameworks by following https://docs.gitlab.com/ee/user/compliance/compliance_center/compliance_frameworks_report.html#create-a-new-compliance-framework.
  3. Now, create a project (lets name it Flight) under the group.
  4. Apply the first compliance framework to this project by following steps in https://docs.gitlab.com/ee/user/compliance/compliance_center/compliance_projects_report.html#apply-a-compliance-framework-to-projects-in-a-group.
  5. Visit audit events dashboard for the project, in this case it would be http://gitlab.localdev:3000/toolbox/Flight/-/audit_events, it will have audit event for the project being assigned with a compliance framework.
  6. Now visit compliance center of the group and remove the framework associated with the project.
  7. Again visit project's audit event dashboard, it will have an audit event for the framework being unassigned from the project.

Related to #464159 (closed)

Edited by Hitesh Raghuvanshi

Merge request reports