bbqsrc/oyster

Audit logging UI and API

Opened this issue · 0 comments

Right now there is very limited capacity to do logging of anything other than HTTP requests.

I would like to see at least the following:

  • Fully auditable vote counting flows.
  • Views for this audit
  • Strict logging of administrator actions
  • Automatic flagging of suspicious activity
  • Logging flows that send errors and higher via email immediately to security teams
  • Send email to admins upon every login from a new IP address

This list will definitely grow.