Skip to content

Commit a19f47a

Browse files
committed
IAM | Add Events
Signed-off-by: shirady <57721533+shirady@users.noreply.github.com>
1 parent 1a4d22d commit a19f47a

File tree

1 file changed

+37
-5
lines changed

1 file changed

+37
-5
lines changed

src/server/system_services/account_server.js

Lines changed: 37 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1264,6 +1264,18 @@ async function update_user(req) {
12641264
}
12651265
});
12661266

1267+
const sys_id = req.rpc_params.new_system_parameters ?
1268+
system_store.parse_system_store_id(req.rpc_params.new_system_parameters.new_system_id) :
1269+
req.system._id;
1270+
Dispatcher.instance().activity({
1271+
event: 'account.update',
1272+
level: 'info',
1273+
system: (req.system && req.system._id) || sys_id,
1274+
actor: requesting_account._id,
1275+
account: requesting_account._id,
1276+
desc: `${requested_account.email.unwrap()} was updated ` + (requesting_account ? `by ${requesting_account.email.unwrap()}` : ``),
1277+
});
1278+
12671279
return {
12681280
iam_path: iam_path || IAM_DEFAULT_PATH,
12691281
username: user_name,
@@ -1282,11 +1294,7 @@ async function delete_user(req) {
12821294
account_util._check_if_requested_account_is_root_account_or_IAM_user(action, requesting_account, requested_account);
12831295
account_util._check_if_requested_is_owned_by_root_account(action, requesting_account, requested_account);
12841296
account_util._check_if_user_does_not_have_resources_before_deletion(action, requested_account);
1285-
const delete_user_info = {
1286-
system: system_store.data.systems[0],
1287-
account: requested_account,
1288-
};
1289-
return account_util.delete_account(delete_user_info, requested_account);
1297+
return account_util.delete_account(req, requested_account);
12901298
}
12911299

12921300
async function list_users(req) {
@@ -1387,6 +1395,18 @@ async function update_access_key(req) {
13871395
}]
13881396
}
13891397
});
1398+
1399+
const sys_id = req.rpc_params.new_system_parameters ?
1400+
system_store.parse_system_store_id(req.rpc_params.new_system_parameters.new_system_id) :
1401+
req.system._id;
1402+
Dispatcher.instance().activity({
1403+
event: 'account.update_credentials',
1404+
level: 'info',
1405+
system: (req.system && req.system._id) || sys_id,
1406+
actor: requesting_account._id,
1407+
account: requesting_account._id,
1408+
desc: `Credentials for ${requested_account.email.unwrap()} were updated ` + (requesting_account ? `by ${requesting_account.email.unwrap()}` : ``),
1409+
});
13901410
}
13911411

13921412
async function get_access_key_last_used(req) {
@@ -1426,6 +1446,18 @@ async function delete_access_key(req) {
14261446
}]
14271447
}
14281448
});
1449+
1450+
const sys_id = req.rpc_params.new_system_parameters ?
1451+
system_store.parse_system_store_id(req.rpc_params.new_system_parameters.new_system_id) :
1452+
req.system._id;
1453+
Dispatcher.instance().activity({
1454+
event: 'account.delete_credentials',
1455+
level: 'info',
1456+
system: (req.system && req.system._id) || sys_id,
1457+
actor: requesting_account._id,
1458+
account: requesting_account._id,
1459+
desc: `Credentials for ${requested_account.email.unwrap()} were deleted ` + (requesting_account ? `by ${requesting_account.email.unwrap()}` : ``),
1460+
});
14291461
}
14301462

14311463
async function tag_user(req) {

0 commit comments

Comments
 (0)