refactor: standardize audit logging for ISO27001 compliance
This commit is contained in:
@@ -64,9 +64,16 @@ class AuditAction(str, Enum):
|
||||
USER_HARD_DELETE = "user.hard_delete"
|
||||
USER_SUSPEND = "user.suspend"
|
||||
USER_UNSUSPEND = "user.unsuspend"
|
||||
USER_RESTORE = "user.restore"
|
||||
PASSWORD_CHANGE = "user.password_change"
|
||||
PASSWORD_RESET = "user.password_reset"
|
||||
|
||||
# Login/security events
|
||||
LOGIN_BLOCKED_COMPLIANCE = "login.blocked.compliance"
|
||||
MFA_COMPLIANCE_BYPASS_ATTEMPT = "mfa.compliance.bypass_attempt"
|
||||
MFA_NOTIFICATION_SENT = "mfa.notification.sent"
|
||||
MFA_SUSPENSION_NOTIFICATION_SENT = "mfa.suspension_notification.sent"
|
||||
|
||||
# Organization actions
|
||||
ORG_CREATE = "org.create"
|
||||
ORG_UPDATE = "org.update"
|
||||
@@ -155,6 +162,32 @@ class AuditAction(str, Enum):
|
||||
DEPARTMENT_MEMBER_ADDED = "department.member.added"
|
||||
DEPARTMENT_MEMBER_REMOVED = "department.member.removed"
|
||||
|
||||
# ZeroTier network actions
|
||||
ZT_APPROVAL_REOPENED = "zt.approval.reopened"
|
||||
ZT_APPROVAL_REQUESTED = "zt.approval.requested"
|
||||
ZT_APPROVAL_GRANTED = "zt.approval.granted"
|
||||
ZT_APPROVAL_REJECTED = "zt.approval.rejected"
|
||||
ZT_APPROVAL_REVOKED = "zt.approval.revoked"
|
||||
ZT_MEMBERSHIP_ACTIVATED = "zt.membership.activated"
|
||||
ZT_MEMBERSHIP_DEACTIVATED = "zt.membership.deactivated"
|
||||
ZT_MEMBERSHIP_CREATED = "zt.membership.created"
|
||||
ZT_MEMBER_AUTHORIZED = "zt.member.authorized"
|
||||
ZT_MEMBER_DEAUTHORIZED = "zt.member.deauthorized"
|
||||
ZT_REQUEST_REVOKED = "zt.request.revoked"
|
||||
ZT_KILL_SWITCH_ACTIVATED = "zt.kill_switch.activated"
|
||||
ZT_ACTIVATION_EXPIRED = "zt.activation.expired"
|
||||
ZT_NETWORK_CREATED = "zt.network.created"
|
||||
ZT_NETWORK_UPDATED = "zt.network.updated"
|
||||
ZT_NETWORK_DELETED = "zt.network.deleted"
|
||||
ZT_NETWORK_RESTORED = "zt.network.restored"
|
||||
ZT_CONFIG_UPDATED = "org.zerotier_config.updated"
|
||||
ZT_CONFIG_DELETED = "org.zerotier_config.deleted"
|
||||
|
||||
# Device actions
|
||||
DEVICE_REGISTERED = "device.registered"
|
||||
DEVICE_UPDATED = "device.updated"
|
||||
DEVICE_REMOVED = "device.removed"
|
||||
|
||||
|
||||
class OIDCGrantType(str, Enum):
|
||||
"""OIDC grant types."""
|
||||
|
||||
Reference in New Issue
Block a user