FAQ | This is a LIVE service | Changelog

Audit additional details when blocking / unblocking users in GitLab

Description

Currently, when we block/unblock a user, the only details logged are the user id / username. This doesn't help tell us why a user was blocked / unblocked. We'd need to then manually look up these details should any issues occur.

Before blocking/unblocking, we need to log all GitLabUser attributes used in the decision:

  • event description
  • user_id
  • username
  • is_blocked_by_script
  • is_external_user
  • is_inactive
  • current_sign_in_at
  • created_at
  • email

Also, after the block/unblock occurs, we just need to log the following:

  • event description
  • user_id
  • username

Further details

Task list

Acceptance criteria

  • Before block/unblock, log all attributes used in decision
  • After block/unblock, log user_id / username

Links/references