coder · BrunoQuaresma · Sep 20, 2022 · Sep 19, 2022 · Sep 19, 2022 · Sep 19, 2022
diff --git a/coderd/audit.go b/coderd/audit.go
@@ -46,7 +46,10 @@ func (api *API) auditLogs(rw http.ResponseWriter, r *http.Request) {
 		Offset:       int32(page.Offset),
 		Limit:        int32(page.Limit),
 		ResourceType: filter.ResourceType,
+		ResourceID:   filter.ResourceID,
 		Action:       filter.Action,
+		Username:     filter.Username,
+		UserEmail:    filter.UserEmail,
 	})
 	if err != nil {
 		httpapi.InternalServerError(rw, err)
@@ -77,7 +80,10 @@ func (api *API) auditLogCount(rw http.ResponseWriter, r *http.Request) {
 
 	count, err := api.Database.GetAuditLogCount(ctx, database.GetAuditLogCountParams{
 		ResourceType: filter.ResourceType,
+		ResourceID:   filter.ResourceID,
 		Action:       filter.Action,
+		Username:     filter.Username,
+		UserEmail:    filter.UserEmail,
 	})
 	if err != nil {
 		httpapi.InternalServerError(rw, err)
@@ -134,6 +140,9 @@ func (api *API) generateFakeAuditLog(rw http.ResponseWriter, r *http.Request) {
 	if params.ResourceType == "" {
 		params.ResourceType = codersdk.ResourceTypeUser
 	}
+	if params.ResourceID == uuid.Nil {
+		params.ResourceID = uuid.New()
+	}
 
 	_, err = api.Database.InsertAuditLog(ctx, database.InsertAuditLogParams{
 		ID:               uuid.New(),
@@ -142,7 +151,7 @@ func (api *API) generateFakeAuditLog(rw http.ResponseWriter, r *http.Request) {
 		Ip:               ipNet,
 		UserAgent:        r.UserAgent(),
 		ResourceType:     database.ResourceType(params.ResourceType),
-		ResourceID:       user.ID,
+		ResourceID:       params.ResourceID,
 		ResourceTarget:   user.Username,
 		Action:           database.AuditAction(params.Action),
 		Diff:             diff,
@@ -251,7 +260,10 @@ func auditSearchQuery(query string) (database.GetAuditLogsOffsetParams, []coders
 	parser := httpapi.NewQueryParamParser()
 	filter := database.GetAuditLogsOffsetParams{
 		ResourceType: parser.String(searchParams, "", "resource_type"),
+		ResourceID:   parser.UUID(searchParams, uuid.Nil, "resource_id"),
 		Action:       parser.String(searchParams, "", "action"),
+		Username:     parser.String(searchParams, "", "username"),
+		UserEmail:    parser.String(searchParams, "", "user_email"),
 	}
 
 	return filter, parser.Errors

diff --git a/coderd/audit_test.go b/coderd/audit_test.go
@@ -4,6 +4,7 @@ import (
 	"context"
 	"testing"
 
+	"github.com/google/uuid"
 	"github.com/stretchr/testify/require"
 
 	"github.com/coder/coder/coderd/coderdtest"
@@ -47,6 +48,7 @@ func TestAuditLogsFilter(t *testing.T) {
 		ctx := context.Background()
 		client := coderdtest.New(t, nil)
 		_ = coderdtest.CreateFirstUser(t, client)
+		userResourceID := uuid.New()
 
 		// Create two logs with "Create"
 		err := client.CreateTestAuditLog(ctx, codersdk.CreateTestAuditLogRequest{
@@ -57,13 +59,15 @@ func TestAuditLogsFilter(t *testing.T) {
 		err = client.CreateTestAuditLog(ctx, codersdk.CreateTestAuditLogRequest{
 			Action:       codersdk.AuditActionCreate,
 			ResourceType: codersdk.ResourceTypeUser,
+			ResourceID:   userResourceID,
 		})
 		require.NoError(t, err)
 
 		// Create one log with "Delete"
 		err = client.CreateTestAuditLog(ctx, codersdk.CreateTestAuditLogRequest{
 			Action:       codersdk.AuditActionDelete,
 			ResourceType: codersdk.ResourceTypeUser,
+			ResourceID:   userResourceID,
 		})
 		require.NoError(t, err)
 
@@ -93,9 +97,25 @@ func TestAuditLogsFilter(t *testing.T) {
 				SearchQuery:    "resource_type:template",
 				ExpectedResult: 1,
 			},
+			{
+				Name:           "FilterByUserEmail",
+				SearchQuery:    "user_email:" + coderdtest.FirstUserParams.Email,
+				ExpectedResult: 3,
+			},
+			{
+				Name:           "FilterByUsername",
+				SearchQuery:    "username:" + coderdtest.FirstUserParams.Username,
+				ExpectedResult: 3,
+			},
+			{
+				Name:           "FilterByResourceID",
+				SearchQuery:    "resource_id:" + userResourceID.String(),
+				ExpectedResult: 2,
+			},
 		}
 
 		for _, testCase := range testCases {
+			// Test filtering
 			t.Run(testCase.Name, func(t *testing.T) {
 				t.Parallel()
 				auditLogs, err := client.AuditLogs(ctx, codersdk.AuditLogsRequest{
@@ -107,75 +127,15 @@ func TestAuditLogsFilter(t *testing.T) {
 				require.NoError(t, err, "fetch audit logs")
 				require.Len(t, auditLogs.AuditLogs, testCase.ExpectedResult, "expected audit logs returned")
 			})
-		}
-	})
-}
-
-func TestAuditLogCountFilter(t *testing.T) {
-	t.Parallel()
-
-	t.Run("Filter", func(t *testing.T) {
-		t.Parallel()
-
-		ctx := context.Background()
-		client := coderdtest.New(t, nil)
-		_ = coderdtest.CreateFirstUser(t, client)
 
-		// Create two logs with "Create"
-		err := client.CreateTestAuditLog(ctx, codersdk.CreateTestAuditLogRequest{
-			Action:       codersdk.AuditActionCreate,
-			ResourceType: codersdk.ResourceTypeTemplate,
-		})
-		require.NoError(t, err)
-		err = client.CreateTestAuditLog(ctx, codersdk.CreateTestAuditLogRequest{
-			Action:       codersdk.AuditActionCreate,
-			ResourceType: codersdk.ResourceTypeUser,
-		})
-		require.NoError(t, err)
-
-		// Create one log with "Delete"
-		err = client.CreateTestAuditLog(ctx, codersdk.CreateTestAuditLogRequest{
-			Action:       codersdk.AuditActionDelete,
-			ResourceType: codersdk.ResourceTypeUser,
-		})
-		require.NoError(t, err)
-
-		// Test cases
-		testCases := []struct {
-			Name           string
-			SearchQuery    string
-			ExpectedResult int64
-		}{
-			{
-				Name:           "FilterByCreateAction",
-				SearchQuery:    "action:create",
-				ExpectedResult: 2,
-			},
-			{
-				Name:           "FilterByDeleteAction",
-				SearchQuery:    "action:delete",
-				ExpectedResult: 1,
-			},
-			{
-				Name:           "FilterByUserResourceType",
-				SearchQuery:    "resource_type:user",
-				ExpectedResult: 2,
-			},
-			{
-				Name:           "FilterByTemplateResourceType",
-				SearchQuery:    "resource_type:template",
-				ExpectedResult: 1,
-			},
-		}
-
-		for _, testCase := range testCases {
-			t.Run(testCase.Name, func(t *testing.T) {
+			// Test count filtering
+			t.Run("GetCount"+testCase.Name, func(t *testing.T) {
 				t.Parallel()
 				response, err := client.AuditLogCount(ctx, codersdk.AuditLogCountRequest{
 					SearchQuery: testCase.SearchQuery,
 				})
 				require.NoError(t, err, "fetch audit logs count")
-				require.Equal(t, response.Count, testCase.ExpectedResult, "expected audit logs count returned")
+				require.Equal(t, int(response.Count), testCase.ExpectedResult, "expected audit logs count returned")
 			})
 		}
 	})

diff --git a/coderd/database/databasefake/databasefake.go b/coderd/database/databasefake/databasefake.go
@@ -2388,14 +2388,27 @@ func (q *fakeQuerier) GetAuditLogsOffset(ctx context.Context, arg database.GetAu
 			arg.Offset--
 			continue
 		}
-
 		if arg.Action != "" && !strings.Contains(string(alog.Action), arg.Action) {
 			continue
 		}
-
 		if arg.ResourceType != "" && !strings.Contains(string(alog.ResourceType), arg.ResourceType) {
 			continue
 		}
+		if arg.ResourceID != uuid.Nil && alog.ResourceID != arg.ResourceID {
+			continue
+		}
+		if arg.Username != "" {
+			user, err := q.GetUserByID(context.Background(), alog.UserID)
+			if err == nil && !strings.EqualFold(arg.Username, user.Username) {
+				continue
+			}
+		}
+		if arg.UserEmail != "" {
+			user, err := q.GetUserByID(context.Background(), alog.UserID)
+			if err == nil && !strings.EqualFold(arg.UserEmail, user.Email) {
+				continue
+			}
+		}
 
 		user, err := q.GetUserByID(ctx, alog.UserID)
 		userValid := err == nil
@@ -2440,10 +2453,24 @@ func (q *fakeQuerier) GetAuditLogCount(_ context.Context, arg database.GetAuditL
 		if arg.Action != "" && !strings.Contains(string(alog.Action), arg.Action) {
 			continue
 		}
-
 		if arg.ResourceType != "" && !strings.Contains(string(alog.ResourceType), arg.ResourceType) {
 			continue
 		}
+		if arg.ResourceID != uuid.Nil && alog.ResourceID != arg.ResourceID {
+			continue
+		}
+		if arg.Username != "" {
+			user, err := q.GetUserByID(context.Background(), alog.UserID)
+			if err == nil && !strings.EqualFold(arg.Username, user.Username) {
+				continue
+			}
+		}
+		if arg.UserEmail != "" {
+			user, err := q.GetUserByID(context.Background(), alog.UserID)
+			if err == nil && !strings.EqualFold(arg.UserEmail, user.Email) {
+				continue
+			}
+		}
 
 		logs = append(logs, alog)
 	}

diff --git a/coderd/database/queries.sql.go b/coderd/database/queries.sql.go