search

globaleaks / globaleaks-whistleblowing-software

GlobaLeaks is a free and open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
https://www.globaleaks.org
Other
1.25k stars 274 forks source link

Extend audit log to enable to filter and order columns #4214

Open evilaliv3 opened 1 month ago

evilaliv3 commented 1 month ago

Proposal

This ticket is to track the implementation of some extentions to audit logs to empower administrators to perform auditing activities.

Motivation and context

Many users in recent times had the need to try to reconstruct:

The current platform logs almost that it is needed but this information is not easy accessible. For example:

In addition the information is not so accessible (users and reports are identified by ID instead of name while we could possibly export also the username and the report number)

evilaliv3 commented 1 month ago

@javialama @rglauco @larrykind @gianlucagilardi : I think this ticket could be interesting to you.

If you have collected any idea or need please feel free to add it here.

JaviAlama commented 1 month ago

Hello colleagues. Everything indicated in this ticket can be done very easily from the log files provided by the platform.

In our case, using Excel, we can do everything indicated with 1-2 clicks.

For us, although interesting, these are not priority functionalities right now.

evilaliv3 commented 1 month ago

Thank you @JaviAlama for your feedback. I really appreciate.

For sure it is not priority and I consider the same from the point of view of auditing that definitely can be done with excel. Is from the security perspective that i think we should support users to be able to not export audits logs if not necessary because of course by doing this some metadata is exported, about timing of reports, about status of reports, about timing of access by users that can expose whistleblowers if put together with other information.