Add user/group changelogs #10415

Open
opened 2025-12-29 21:31:10 +01:00 by adam · 4 comments
Owner

Originally created by @mcao2 on GitHub (Oct 29, 2024).

NetBox version

v3.7.8

Feature type

Change to existing functionality

Triage priority

N/A

Proposed functionality

Before NetBox v3.6.0, user/group management is done using django's admin page and we have log entries for related object changes. But starting from v3.6.0 (https://github.com/netbox-community/netbox/pull/12877), NetBox now manage user/group in its Admin tab, and django admin seems completely removed in v4.0. I propose we add similar change logging feature for user/group changes so that we can better understand/audit the activities.

Use case

When there's multiple admins or users with user/group change permissions, it becomes unmanageable to ask who made that change and when that change happened. If we can have a similar Admin LogEntry in NetBox then it would greatly improve the visibility for admins.

Database changes

No response

External dependencies

No response

Originally created by @mcao2 on GitHub (Oct 29, 2024). ### NetBox version v3.7.8 ### Feature type Change to existing functionality ### Triage priority N/A ### Proposed functionality Before NetBox v3.6.0, user/group management is done using django's admin page and we have log entries for related object changes. But starting from v3.6.0 (https://github.com/netbox-community/netbox/pull/12877), NetBox now manage user/group in its Admin tab, and django admin seems completely removed in v4.0. I propose we add similar change logging feature for user/group changes so that we can better understand/audit the activities. ### Use case When there's multiple admins or users with user/group change permissions, it becomes unmanageable to ask who made that change and when that change happened. If we can have a similar Admin LogEntry in NetBox then it would greatly improve the visibility for admins. ### Database changes _No response_ ### External dependencies _No response_
adam added the type: featurecomplexity: mediumnetboxstatus: backlog labels 2025-12-29 21:31:10 +01:00
Author
Owner

@PieterL75 commented on GitHub (Oct 30, 2024):

I think an audit log might be a better place.. That log could also include login/logout/loginattempts...

@PieterL75 commented on GitHub (Oct 30, 2024): I think an audit log might be a better place.. That log could also include login/logout/loginattempts...
Author
Owner

@mcao2 commented on GitHub (Oct 30, 2024):

I think an audit log might be a better place.. That log could also include login/logout/loginattempts...

I completely agree, adjusted the issue title to not suggest where the changelog should exists

@mcao2 commented on GitHub (Oct 30, 2024): > I think an audit log might be a better place.. That log could also include login/logout/loginattempts... I completely agree, adjusted the issue title to not suggest where the changelog should exists
Author
Owner

@bctiemann commented on GitHub (Oct 31, 2024):

Another possibility might be to add the ChangeLoggingMixin to the User and Group models, which are already subclassed from AbstractUser and can support additional customizations.

A separate audit log is a good idea, but we already have pervasive change logging for many other models that we might as well extend to users.

@bctiemann commented on GitHub (Oct 31, 2024): Another possibility might be to add the `ChangeLoggingMixin` to the `User` and `Group` models, which are already subclassed from `AbstractUser` and can support additional customizations. A separate audit log is a good idea, but we already have pervasive change logging for many other models that we might as well extend to users.
Author
Owner

@ITJamie commented on GitHub (Nov 1, 2024):

This came up during the isp working group. The idea of a separate audit log was mentioned to track admin related changes with a bit more detail (ips used when making change) and also to be able to limit who can see the audit logs

@ITJamie commented on GitHub (Nov 1, 2024): This came up during the isp working group. The idea of a separate audit log was mentioned to track admin related changes with a bit more detail (ips used when making change) and also to be able to limit who can see the audit logs
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/netbox#10415