Hello! I’m looking for any and all information about how we might audit moderator & admin activity associated with user data (in particular, email and IP Address). I believe there are at least 2 activities to consider here (but interested to understand if there are others): show email/ip address via User Admin exporting a list of users (which would include these 2 fields). My question is: is there any auditing/logging for these 2 activities (and other relevant actions)? I’ve found Staff Activities perhaps covers the first one (are there other/better sources?), but having trouble finding audit data on the second. Thanks in advance!

data explorer queries taking a backup and inspecting it offline But - if you cannot not trust your moderators, you have a way bigger problem than this.

Thanks for the quick reply. Trust and audit requirements are 2 different things :slight_smile: Any guidance on the queries to run? I’ve found that the the user_exports table is unfortunately empty (I’m guessing rows are purged here after some time?).

[תמונה] aram: exporting a list of users This will create an entry on the Staff Actions page. The action will be set to “export entity” and the subject set to what was exported, for example, “user_list” or “user_archive.”

Heres the link to that /admin/logs/staff_action_logs?filters={"action_name"%3A"entity_export"%2C"action_id"%3A66%2C"subject"%3A"user_list"} There is a possibility that the list of users were never exported meaning that would be empty. Never delved deep into the data explorer so not sure

[תמונה] aram: Trust and audit requirements are 2 different things Given the possibility (at least for an admin) to backup/restore, which allows for inspecting the database and erasing any traces offline, an audit will never give you a complete picture and maybe even a false sense of security.

בקרת פעילות מודרטורים/אדמינים הקשורה לנתוני משתמשים

קהילה נתונים ודיווח

RGJ (Richard - Communiteq) 3 בנובמבר,‏ 2023,‏ 7:01pm 2

data explorer queries
taking a backup and inspecting it offline

But - if you cannot not trust your moderators, you have a way bigger problem than this.

נושא		תגובות	צפיות
Moderators can view emails and export user lists Product Support	12	1929	18 בספטמבר,‏ 2018
Incorrect Log entry - Export entity, user_archive UX	8	1121	6 באוקטובר,‏ 2018
Exporting Staff Action logs exports Screened IPs Feature	2	1093	12 בדצמבר,‏ 2014
Admins can still read anyone's PM's by downloading the database Feature privacy	19	6067	26 במרץ,‏ 2015
Make data explorer available to moderators Feature pr-welcome , data-explorer	37	6112	10 בפברואר,‏ 2020

בקרת פעילות מודרטורים/אדמינים הקשורה לנתוני משתמשים

נושאים קשורים