Method Export

enterprise/audit/audit.go:53–84

(ctx context.Context, alog database.AuditLog)

}

func (a *auditor) Export(ctx context.Context, alog database.AuditLog) error {
	decision, err := a.filter.Check(ctx, alog)
	if err != nil {
		return xerrors.Errorf("filter check: %w", err)
	}

	// AsSystemRestricted is used to look up the actor name even
	// when the caller lacks read access to the user.
	actor, err := a.db.GetUserByID(dbauthz.AsSystemRestricted(ctx), alog.UserID) //nolint:gocritic // see above
	if err != nil && !xerrors.Is(err, sql.ErrNoRows) {
		return err
	}

	for _, backend := range a.backends {
		if decision&backend.Decision() != backend.Decision() {
			continue
		}

		err = backend.Export(ctx, alog, BackendDetails{Actor: &Actor{
			ID:       actor.ID,
			Email:    actor.Email,
			Username: actor.Username,
		}})
		if err != nil {
			// naively return the first error. should probably make this smarter
			// by returning multiple errors.
			return xerrors.Errorf("export audit log to backend: %w", err)
		}
	}

	return nil
}