Background
In order to satisfy the access logging, reporting, and revoking requirements detailed in T292755: Epic: IP Info access, we need to log when certain events occur to the logging table.
AC
- When the following events occur, we should log a line to the logging table:
From T263756#7405169:
- user enables their own access
- user disable their own access
Notes
- Originally, the first AC also included the following events:
- user gains "basic" access
- user gains "full" access
- user has (all? some?) access revoked
- user has (all? some?) access re-enabled (?)
From T263756#7407907:
- User is granted the right to enable the tool - the ipinfo right
- User has the right to enable the tool revoked
However, these will fall out of the work done in T296085: Create a group that grants basic ipinfo* rights, T296184: Automatically promote users to the group that grants basic rights, and T296499: Grant certain groups the ipinfo-view-full right as a user being added to/removed from a groups is logged to the user rights log, e.g. https://en.wikipedia.org/wiki/Special:Log?type=rights
