Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Consider auditing for Tenant deletion #1345

Open
loneil opened this issue Aug 29, 2024 · 1 comment
Open

Consider auditing for Tenant deletion #1345

loneil opened this issue Aug 29, 2024 · 1 comment
Labels
pinned Pinned item that will never become stale

Comments

@loneil
Copy link
Collaborator

loneil commented Aug 29, 2024

When a tenant is fully deleted it's just all removed from the DB. For a in-use tenant that's a pretty "serious" operation so we can think about what auditing could be done to track if that happens, help with recovery if it's a mistake, and keep records for security incidents.

There would be existing log statements (at least just from the REST endpoint call) so there could be some tracking with Grafana as well?

But without relying on logging we could consider an Innkeeper audit table against the Innkeeper tenant that keeps track of these actions (as well as things like tenant creation, "make-issuer" allowance, etc)

As another feature on top of auditing we should probably have (at least for "normal" operational usage) emailing functionality when the delete is done through the Tenant UI (which is the only way real operators of Traction should be doing it anyways). Dispatch an email to the Innkeeper inbox about a deletion. Possibly can use the Tenant email on file to inform about deletion as well?
Consider if this should be done on suspension (soft-delete) too?

Copy link

This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.

@github-actions github-actions bot added the Stale label Sep 29, 2024
@loneil loneil added pinned Pinned item that will never become stale and removed Stale labels Oct 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
pinned Pinned item that will never become stale
Projects
None yet
Development

No branches or pull requests

1 participant