LO-067 [Intermediate]: Multi-User Team Activity Audit Log

[Kuldeeep18]

Description

In multi-user organizations, multiple sales agents can import leads, delete campaigns, or modify settings. Currently, there is no history log of who did what. We need to build an audit log system.

User & Contributor Value

• Contributors: Database logging model design, request middleware extraction, and audit log list APIs.
• Users: Essential security feature. Allows workspace admins to track user actions and troubleshoot modifications.

Code Locations

• backend/tenants/models.py
• backend/campaigns/views.py

Implementation Guide

1. Create AuditLog Model:

   class AuditLog(TenantModel):
       user = models.ForeignKey(User, on_delete=models.SET_NULL, null=True)
       action = models.CharField(max_length=255) # e.g. "Campaign launched"
       target_id = models.CharField(max_length=255, null=True)
       ip_address = models.GenericIPAddressField(null=True)

2. Record Actions: Hook signals or add log creation lines inside view actions (create lead, delete campaign, change settings).
3. Audit Log Panel: Build an audit logs view inside Settings for organization administrators.

[manikanta-tamminana]

Hi @Kuldeep18,

I would like to work on this issue under GSSoC.

My implementation plan is:

• Create an AuditLog model to capture user actions, target resources, timestamps, and IP addresses while maintaining organization-level isolation.
• Add audit log creation hooks for key actions such as lead imports, campaign creation/deletion, settings updates, and other administrative operations.
• Implement a reusable logging mechanism to ensure audit records are generated consistently across the application.
• Capture request metadata, including the acting user and IP address, to provide complete activity tracking.
• Develop a secure audit log API/view accessible only to organization administrators.
• Build an Audit Logs panel within Settings, allowing admins to review, search, and monitor workspace activity.

This feature will significantly improve security, accountability, and troubleshooting capabilities by providing a complete history of organizational actions. Could you please assign this issue to me?

Thank you! 🚀