passwords
passwords copied to clipboard
marius-wieschollek
[Feature] Activity Support
Currently, no activities are created for adding/editing/deleting passwords. This is of course a minor issue, but would be nice to have to allow auditing of passwords.
System Information
- Nextcloud Version: 13.0.2
Steps to reproduce
- Create/edit/delete password
- Check the activities app ("all activities")
- Observe that there are no entries related to Passwords
Actual result
No activities recorded.
Expected result
The Passwords app should create activities whenever passwords are
- created
- edited
- deleted
- tagged
- moved
- shared
- share accessed
It would be possible, but the activity stream will only contain very basic information like "You updated a password" or "You shared a password with a, b and 123 others". This is because activities are created server side but passwords may be encrypted client side.
Ah okay, so the full metadata including title are encrypted? Okay - very nice from a security perspective but indeed renders this less useful.
Maybe it's still useful to have the basic information there to see that there has been activity - especially the sharing I guess.
Not the full metadata, but most things which are defined by the user like the title, website etc. Structural data like the folder, tags, change date and favourite status are available. Also there can be deep links into the passwords app. so you might just see "A passwords ..." but if you click on it you can get directly to it.
That seems reasonable I guess. Even "a password in folder X has been changed" is quite interesting, amended by the link becomes really useful for auditing.
I will put it on the roadmap, but after client-side-encryption and sse-v2
If someone wants to work on this, Passwords already has lots of Nextcloud Events for any relevant change: https://git.mdns.eu/nextcloud/passwords/-/tree/master/src/lib/Events
These can be used to then create the activity log