Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Event audit log for significant actions #4360

Closed
19 tasks
indirect opened this issue Jan 17, 2024 · 0 comments · Fixed by #4367
Closed
19 tasks

Event audit log for significant actions #4360

indirect opened this issue Jan 17, 2024 · 0 comments · Fixed by #4367
Assignees
@segiddins

Comments

@indirect
Copy link
Member

indirect commented Jan 17, 2024 •
edited by segiddins

  • soft delete users so audit logs persist
  • disable soft-deleted accounts without changing email to security+whatever
  • create table to store audit log events
  • log user events
  • log gem events
    • push
    • yank
    • add owner
    • remove owner
    • ???
  • add a user view of events for that user
  • add a per-gem view of events for owners
  • add a global view for of events for admins

Prior art from PyPi:
@segiddins segiddins self-assigned this Jan 17, 2024
This was referenced Jan 19, 2024
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@segiddins segiddins

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add security event log rubygems/rubygems.org
2 participants
@indirect @segiddins