Audit Logging in the Study-Manager

[smeddinck]

ogging of user’s interaction with MORE manager frontend — May be via Matomo

include the ability to generate “audit logs” from study manager interaction … MUST HAVE FOR PATIENT USE … — with a switch for optionally associating logs as study data … e.g. via Matomo, or directly integrated with MORE for easier data association

[alireza-dhp]

This ticket addresses the request for audit logging. It involves logging data regarding the time (When), user (Who), and nature of changes made (What) in a study.

[ja-fra]

• We need to keep a record of who did when what.
  • We also want to show that someone did not do something.
• We will log every write access (changes) to the study-configuration
• We will also log relevant read access to the study-configuraton
  • Listing observations, interventions, groups, participants, ...
  • Reading the details of above entities
• We will log access to observation data.
• The audit log is completely separate and independent from the participant data.
• It shall be possible to export the audit-log.
• Access to the audit-log is restricted to users with the role STUDY_ADMIN.