Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Feature idea: Add audit log channel #347

Open
Syndesi opened this issue Nov 18, 2024 · 1 comment
Open

Feature idea: Add audit log channel #347

Syndesi opened this issue Nov 18, 2024 · 1 comment
Labels
Enhancement Improving existing functionalities. Feature Introducing new capabilities.
Milestone
0.3.0

Comments

@Syndesi
Copy link
Member

Syndesi commented Nov 18, 2024

In order to clearly separate audit logs from general application logs, it could be benefitial to create a separate audit logging channel.

The following logs should be reclassified as audit logs:

  • Network requests inlcuding user identifier (UUID or anonymized?).
  • Network requests which failed due to missing permissions.
  • All user and token endpoints.
  • Search endpoints with the UUIDs of elements returned? However this could also flood the system?
@Syndesi Syndesi added Enhancement Improving existing functionalities. Feature Introducing new capabilities. labels Nov 18, 2024
@Syndesi Syndesi added this to the 0.3.0 milestone Nov 18, 2024
@Syndesi
Copy link
Member Author

Syndesi commented Nov 29, 2024

See also https://pangea.cloud/securebydesign/secure-audit-records/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Enhancement Improving existing functionalities. Feature Introducing new capabilities.
Projects
API Feature Progress
Status: No status
Milestone
0.3.0
Development

No branches or pull requests
1 participant
@Syndesi