search

bcgov / platform-services-registry

Platform services OCP project registry
https://registry.developer.gov.bc.ca/
Apache License 2.0
8 stars 13 forks source link

History - User permission audit logs #2598

Open ThibaultBC opened 2 months ago

ThibaultBC commented 2 months ago

As a Ministry Team, I want a user permission audit trail, so that I can see logs of permissions granted and removed in the past for audit and investigation purposes.

Context: Requested by AG, as they are being audited on this regularly. The current state doesn't allow to follow added and removed users, which can lead to gaps in understanding past permissions and doesn't allow full transparency.

Acceptance Criteria:

  1. On the History Tab of a project set, add a log line for each permission related action, including the name of the user performing the action, the name of the user receiving or loosing permission, the permission in question, and a time and date stamp, including Year, Month, Day, Hours, Minute, Timezone 3 letters (ie. PST).
  2. Add a "Roles" Filter at the top of the list under the "History" Tab, enabling to look only at permission changes.
  3. Add a "Project details" (suggestions welcome for that name) Tab, allowing to look exclusively at project edition logs (ie. filtering out permission logs).
ThibaultBC commented 2 months ago

Not ultimate audit trail, because it's possible to add/remove users in Keycloack. Consider keycloack audit trail as an addition.