Enhancement: Separate audit log for privileged requests

Open
#2,996 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
5/5
Estimated time
Over a week
Newbie friendliness
35/100
Issue type
Feature
Clarity
Needs clarification
Activity status
Quiet
Tech stack
python
Domain
backend, security

Research direction

Start by locating the existing HTTP request log and the code that identifies admin or staff requests. Clarify the required retention period, storage, access controls, and exact definition of a privileged request before implementation; done means those requests are recorded separately and retained longer than the current log.

Written by the indexing model from the issue text.

Description

enhancement
Is your feature request related to a problem? Please describe.

Currently we have a log of HTTP requests that is maintained for some amount of time. I'm proposing that we implement a separate log that's maintained for much longer (year+?) but that only logs privileged requests, such as requests by admins/staff.

Describe the solution you'd like

Separate log of privileged requests that is maintained for longer periods.

Basic Example

N/A

Describe alternatives you've considered

N/A

Drawbacks and Impact

No response

Additional context

No response

Dominant language
Python
Stars
1.7k
Forks
700
Avg merge
1d 23h
Merged PRs (30d)
14

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from python/pythondotorg

All issues in python/pythondotorg

Similar issues

More Python issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.