Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removing a member from a project should result in separate entries in the audit log for each role that was removed #4201

Closed
iaindillingham opened this issue Mar 15, 2024 · 0 comments
Assignees
Labels

Comments

@iaindillingham
Copy link
Member

There are two paths to remove a user's project-level roles. First, on the "Edit Member" page, the user's roles can be unchecked and the "Update member" button can be clicked. Second, on the same page, the "Remove member" button can be clicked.

The first path results in one entry in the audit log for each role. For example:

The second path results in one entry in the audit log. For example:

Notice that the entry doesn't record the roles that were removed, if any.

By interrogating the audit log, we should be able to know which users (who) had which roles (what), at a given point in time (when). Naturally, some users had some roles before the audit log was activated. For these users, the roles they had at a given point in time would be their current roles minus their removed roles. Not recording the roles that were removed (the second path) means the audit log is incomplete.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants