Project

General

Profile

Bug #22199

Audit user and user group linking

Added by Marek Hulán 9 months ago. Updated 3 months ago.

Status:
Closed
Priority:
Normal
Category:
Audit Log
Target version:
Team Backlog:
Fixed in Releases:
Found in Releases:

Description

In order to audit all changes that might affect user permissions, it's not enough to just audit user roles, which is covered by #22051. We also need:

As a user with view_audits permission I want to see user audit record creates when a role has been assigned to a user.

As a user with view_audits permission I want to see user group audit record created when a role has been assigned to a user group.

As a user with view_audits permission I want to see user group audit record created when user group is assigned/disassigned another user group as parent/children. Note that this can have implications on what permissions a user in a given parent user group has grantes.

As a user with view_audits permission I want to see user audit record created when user is assigned or disassigned from a user group. This should include automatic external user group sync. Wile it does not necessarily is triggered by user, without this information, the critical part would be missing.

As a user with view_audits permission I want to see role audit record created when role permissions changes.


Related issues

Related to Foreman - Tracker #21879: [TRACKER] Audit every possible resourceNew2017-12-06

Related to Foreman - Bug #6235: User group membership changes not auditedResolved2014-06-16
Related to Foreman - Bug #23195: associations are not audited on creationClosed2018-04-10
Related to Foreman - Bug #23965: audit: undefined method `each' for "":StringClosed2018-06-17

Associated revisions

Revision d0eef9af (diff)
Added by Swapnil Abnave 7 months ago

Fixes #22199 - Audit has_many associations (#5187)

History

#1 Updated by Marek Hulán 9 months ago

  • Related to Tracker #21879: [TRACKER] Audit every possible resource added

#2 Updated by Tomer Brisker 9 months ago

  • Related to Bug #6235: User group membership changes not audited added

#3 Updated by The Foreman Bot 9 months ago

  • Status changed from New to Ready For Testing
  • Pull request https://github.com/theforeman/foreman/pull/5187 added

#4 Updated by Marek Hulán 7 months ago

  • Legacy Backlogs Release (now unused) set to 330

#5 Updated by Swapnil Abnave 7 months ago

  • % Done changed from 0 to 100
  • Status changed from Ready For Testing to Closed

#6 Updated by Tomer Brisker 6 months ago

  • Related to Bug #23195: associations are not audited on creation added

#7 Updated by The Foreman Bot 6 months ago

  • Assignee set to Lukas Zapletal
  • Pull request https://github.com/theforeman/foreman/pull/5450 added

#8 Updated by Tomer Brisker 4 months ago

  • Related to Bug #23965: audit: undefined method `each' for "":String added

Also available in: Atom PDF