globaleaks/globaleaks-whistleblowing-software

Extend audit log to enable to filter and order columns

Opened this issue · 3 comments

Proposal

This ticket is to track the implementation of some extentions to audit logs to empower administrators to perform auditing activities.

Motivation and context

Many users in recent times had the need to try to reconstruct:

  • what happened on a certain report
  • how a users has operated

The current platform logs almost that it is needed but this information is not easy accessible.
For example:

  • it is not possible to filter for a specific report
  • it is not possible to filter for a specific user
  • it is not possible to filter for a specific log type
  • it is not possible to filter for a certain interval of time
  • it is not possible to do a free text search on the events

In addition the information is not so accessible (users and reports are identified by ID instead of name while we could possibly export also the username and the report number)

@JaviAlama @rglauco @larrykind @gianlucagilardi : I think this ticket could be interesting to you.

If you have collected any idea or need please feel free to add it here.

Hello colleagues. Everything indicated in this ticket can be done very easily from the log files provided by the platform.

In our case, using Excel, we can do everything indicated with 1-2 clicks.

For us, although interesting, these are not priority functionalities right now.

Thank you @JaviAlama for your feedback. I really appreciate.

For sure it is not priority and I consider the same from the point of view of auditing that definitely can be done with excel. Is from the security perspective that i think we should support users to be able to not export audits logs if not necessary because of course by doing this some metadata is exported, about timing of reports, about status of reports, about timing of access by users that can expose whistleblowers if put together with other information.