Engineering / ENG-1511
Log every decision on an access request
Description
Acceptance criteria
- On approve or decline, identity-service writes one audit entry in the same transaction: request, person, access items, decision, who decided, under which role, when, the request's reason, the note.
- A request closed by
ExpireRequestsis logged as closed by the system. - Entries can't be changed or deleted through the API; there's no update path in the code.
- Entries live in the client's region.
Comments (0)
No comments.