Activity Stream misattributes some actions to the user when the action was performed by a sysadmin user

[robredpath]

Brief Description

Updates by sysadmin users to other users' accounts show as having been carried out by the other user in Activity Stream.

Severity Medium

Issue Location https://iatiregistry.org/user/activity/$user

Steps to Reproduce

• Log in as a sysadmin user
• Go to another user's page (i.e. https://iatiregistry.org/user/$user )
• Click Manage
• Make some sort of update, enter your sysadmin password, click Update Profile
• Return to https://iatiregistry.org/user/activity/$user and observe that the change you just made appears to have been made by $user, not you

Note that although this example is a profile update, we have observed this for dataset updates as well.

Expected Results/Behaviour

That updates shown on Activity Stream are attributed to the user who carried them out

Actual Results/Behaviour

That updates shown on Activity Stream are attributed to the user whose account "owns" the relevant resource.

[cormachallinanderilinx]

estimate 2-3 days