tenseleyflow/shithub / e3beb59

Browse files

S34: audit action constants for admin operations

Authored by espadonne
SHA
e3beb59a37d0f669c7991d7716f92e3f56d01ad2
Parents
d6c863e
Tree
438dd7b

1 changed file

StatusFile+-
M internal/auth/audit/audit.go 17 0
internal/auth/audit/audit.gomodified
@@ -71,6 +71,23 @@ const (
7171
 	ActionWatchUnset            Action = "watch_unset"
7272
 	ActionRepoForked            Action = "repo_forked"
7373
 	ActionRepoForkSynced        Action = "repo_fork_synced"
74
+
75
+	// S34 — site admin actions. Always recorded with the real admin's
76
+	// id in actor_id; impersonation flows additionally carry the
77
+	// impersonated user's id in meta.impersonated_user_id.
78
+	ActionAdminSiteAdminGranted   Action = "admin_site_admin_granted"
79
+	ActionAdminSiteAdminRevoked   Action = "admin_site_admin_revoked"
80
+	ActionAdminUserSuspended      Action = "admin_user_suspended"
81
+	ActionAdminUserUnsuspended    Action = "admin_user_unsuspended"
82
+	ActionAdminUserForceDeleted   Action = "admin_user_force_deleted"
83
+	ActionAdminUserPasswordReset  Action = "admin_user_password_reset"
84
+	ActionAdminRepoForceArchived  Action = "admin_repo_force_archived"
85
+	ActionAdminRepoForceDeleted   Action = "admin_repo_force_deleted"
86
+	ActionAdminJobRetried         Action = "admin_job_retried"
87
+	ActionAdminJobDiscarded       Action = "admin_job_discarded"
88
+	ActionAdminImpersonateStarted Action = "admin_impersonate_started"
89
+	ActionAdminImpersonateStopped Action = "admin_impersonate_stopped"
90
+	ActionAdminImpersonateWriteOn Action = "admin_impersonate_write_on"
7491
 )
7592
 
7693
 // Target is a typed target-type constant.