Engineering / ENG-1540
Reason required on access requests
Description
Shaped in Emargen: Reason required on access requests.
Why
Northgate's Q2 audit had a finding: requests without a reason. The note on a request is optional and 80% of people leave it empty.
What we build
- A reason on every new request, 10 to 500 characters.
- Approvers see it in the inbox and the email; it's kept with the decision.
- Old requests show "No reason given".
Done when
Every request made after release has a reason. Target 29 July.
Child issues
- ENG-1541 A reason is required on every new access request Done
- ENG-1543 Approvers see the reason in the inbox and the email Done
- ENG-1546 Requests made before the change show "No reason given" Done
- ENG-1552 The reason goes into the audit log entry for the decision Done
Linked issues
- relates to SUP-980 Northgate: Q2 audit finding, requests without a reason Done
Live. Closing.