User Activity Audit Logs

[lcampbell2]

In order for better transparency of user activity, flow of domain data, and to create a more self-service model, we need to have a centralized location for super admins to view logs of user activity (adding, editing, deleting, etc.).

• explore k8s logs
• decide activities to log/display
• create API queries for logs
• create frontend page
• Reason Select box
• Translations
• tests
• Think about how to notify all users of an org; of recent audit activity (send email update at midnight for example) (Damien put this here)

[h701h]

Add the word 'DKIM', or whatever is more appropriate to this log entry.

• Should we do it?

[h701h]

When a user manually adds or removes tags this should be logged.

• Should we do it?

[h701h]

Most recent events should be shown first.

• Should we do?

[h701h]

The filters menu needs to be relocated. Its interfering with the audit log entries. Perhaps more of a horizontal look than the current vertical look.

• Should we do?

[h701h]

Items per page should be greater than 10. Perhaps the default is best to be 100. I'd rather scroll then paginate.

• Should we do?

[h701h]

The log entry for when a user gets deleted is missing information. I deleted an account, the entry says 'update' with a blank reason.

• Should we do?

[h701h]

When adding a new user, the role could appear in in the 'updated property'

• Should we do?

[h701h]

While testing the create org function the tombstone data failed to load.

• Should we do?

[h701h]

"Reason" should include additional options. Not sure what else though.

• Should we do?

[h701h]

"This domain no longer exists" should fail if the domain exists.

• Should we do?

[h701h]

When adding a domain the dkim and the tag values are not being recorded.

• Should we do?

[h701h]

Show record count?

• Should we do?
• Where else can we do record counts?

[h701h]

Unable to test 'delete org' in the audit logs. See error message.

• Should we do?

[h701h]

Unable to test 'update org' in the audit logs. See error message.

• Should we do?

[h701h]

Can we reduce the size of the time stamp to yyyy-mm-dd, 24H:M.

• Should we do it?

[h701h]

When deleting an account the name of the deleted account isn't displayed correctly.

• Should we do it?

[h701h]

Remove a domain "Reason" should include additional options. "Admin error".

Should we do?