awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-11 23:29:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add logs for workspace user role and read/write permission changes

Browse Source
This commit is contained in:
Tuan Dang
2023-08-09 21:54:56 +07:00
parent 37d52432d0
commit a75ad5ef26
9 changed files with 128 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/src/ee/api/memberships/UpdateUserProjectPermission.ts
+3 -3
View File
@@ -26,9 +26,9 @@ const updateUserProjectPermission = async ({
permissions: denials
})
}).then(async (res) => {
console.log({
permissions: denials
}, res)
// console.log({
// permissions: denials
// }, res)
if (res && res.status === 200) {
return res.json();
}
frontend/src/hooks/api/auditLogs/constants.tsx
+2 -1
View File
@@ -31,7 +31,8 @@ export const eventToNameMap: { [K in EventType]: string } = {
[EventType.CREATE_SECRET_IMPORT]: "Create secret import",
[EventType.UPDATE_SECRET_IMPORT]: "Update secret import",
[EventType.DELETE_SECRET_IMPORT]: "Delete secret import",
[EventType.UPDATE_USER_WORKSPACE_DENIED_PERMISSIONS]: "Update denied permissions",
[EventType.UPDATE_USER_WORKSPACE_ROLE]: "Update user role"
};
export const userAgentTTypeoNameMap: { [K in UserAgentType]: string } = {
frontend/src/hooks/api/auditLogs/enums.tsx
+3 -1
View File
@@ -40,5 +40,7 @@ export enum EventType {
GET_SECRET_IMPORTS = "get-secret-imports",
CREATE_SECRET_IMPORT = "create-secret-import",
UPDATE_SECRET_IMPORT = "update-secret-import",
DELETE_SECRET_IMPORT = "delete-secret-import"
DELETE_SECRET_IMPORT = "delete-secret-import",
UPDATE_USER_WORKSPACE_ROLE = "update-user-workspace-role",
UPDATE_USER_WORKSPACE_DENIED_PERMISSIONS = "update-user-workspace-denied-permissions"
}
frontend/src/hooks/api/auditLogs/types.tsx
+26 -1
View File
@@ -348,6 +348,29 @@ interface DeleteSecretImportEvent {
}
}
interface UpdateUserRole {
type: EventType.UPDATE_USER_WORKSPACE_ROLE,
metadata: {
userId: string;
email: string;
oldRole: string;
newRole: string;
}
}
interface UpdateUserDeniedPermissions {
type: EventType.UPDATE_USER_WORKSPACE_DENIED_PERMISSIONS,
metadata: {
userId: string;
email: string;
deniedPermissions: {
environmentSlug: string;
ability: string;
}[]
}
}
export type Event =
| GetSecretsEvent
| GetSecretEvent
@@ -378,7 +401,9 @@ export type Event =
| GetSecretImportsEvent
| CreateSecretImportEvent
| UpdateSecretImportEvent
| DeleteSecretImportEvent;
| DeleteSecretImportEvent
| UpdateUserRole
| UpdateUserDeniedPermissions;
export type AuditLog = {
_id: string;
frontend/src/views/Project/AuditLogsPage/components/LogsTableRow.tsx
+21
View File
@@ -279,6 +279,27 @@ export const LogsTableRow = ({
<p>{`Import to path: ${event.metadata.importToSecretPath}`}</p>
</Td>
);
case EventType.UPDATE_USER_WORKSPACE_ROLE:
return (
<Td>
<p>{`Email: ${event.metadata.email}`}</p>
<p>{`Old role: ${event.metadata.oldRole}`}</p>
<p>{`New role: ${event.metadata.newRole}`}</p>
</Td>
);
case EventType.UPDATE_USER_WORKSPACE_DENIED_PERMISSIONS:
return (
<Td>
<p>{`Email: ${event.metadata.email}`}</p>
{event.metadata.deniedPermissions.map((permission) => {
return (
<p key={`audit-log-denied-permission-${event.metadata.userId}-${permission.environmentSlug}-${permission.ability}`}>
{`Denied env-ability: ${permission.environmentSlug}-${permission.ability}`}
</p>
);
})}
</Td>
);
default:
return (
<Td />