audit logs

[joubertredrat]

Hi,

I think that is good idea to have user operation log to admin see what the user is doing at Gogs. Similar to example below

user	operation	information
joubertredrat	repo.create	Create repo MyProjectData
joubertredrat	user.settings	Edit settings
tboerger	repo.fork	Create Fork from MyProjectData to ForkMyProjectData
bkcsoft	repo.remove	Remove repo MySource
tboerger	admin.auth	Edit auth LDAP org-connection

This resource can be used on user page too, as user activity, set that log row is public (repo.) or private (user., admin.*) and display only public activity.

What you think?

Chat summary from March 14, 2017

References:
gogs/gogs#3016

[xinity]

i like this idea, being able to track down access and/or modification outside of what git provides .
nice proposal :)

[bkcsoft]

I've been meaning to implement this for a while, but I don't know when I'll have time to do it since it'll be a big change 😒

[lunny]

So that your boss could know how many work you have done. :(

[lunny]

No people are working on this.

[joubertredrat]

I really would to implement this, but I think that I can't, I'm still not good with golang

[lunny]

Step by step, start from some simple PR! You can.

[pgaskin]

I am willing to work on this.

@lunny I have a few questions:

• How should these be stored? A new table? A new log level?
• How much should be logged? IP addresses? URL? Session?