
Security News
Follow-up and Clarification on Recent Malicious Ruby Gems Campaign
A clarification on our recent research investigating 60 malicious Ruby gems.
A UI for audited, a Ruby on Rails extension for auditing models.
Add this line to your application's Gemfile:
gem "audited-ui"
And then execute:
$ bundle
Or install it yourself as:
$ gem install audited-ui
By just installing it, audited-ui will add the following routes:
/audited/audits
/audited/audits/:auditable_type
/audited/audits/:auditable_type/:auditable_id
that will allow you to audit all records of all types, all records of a given auditable type, or all records of a given auditable object, respectively.
Audit all records by linking to audited_audits_path
, like this:
<%= link_to "Audit all records", audited_audits_path %>
Or just a specific auditable type, using audited_auditable_type_audits_path
, like this:
<%= link_to "Audit all people records", audited_auditable_type_audits_path(auditable_type: "person") %>
Or a specific record, using audited_auditable_audits_path
, like this:
<%= link_to "Audit this person", audited_auditable_audits_path(auditable_type: "person", auditable_id: person.id) %>
If you already set it up, you'll notice that audited-ui comes with a barebone UI that you can use. But, purposedly, the UI is very simple. The idea is that you can use it if it's good enough, but in most cases you should customize it to match your application's UI.
To generate the views simply run:
$ bundle exec rails g audited:ui:views
Every string is I18ned, even class and attributes names. See this guide if you want to translate your audited models and attributes.
By default only english and spanish are supported. You can add other locales by copying the content of this file into your app's config/locale/yourlocale.yml
and translating the given strings. And if you do that send a PR :P .
If you need to customize just one string, copy that string in your app's locale file:
en:
audited:
ui:
audits:
index:
title:
all: Auditing everything
devise_for
, so we can have more and better control on routes.The gem is available as open source under the terms of the MIT License.
FAQs
Unknown package
We found that audited-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.
Security News
ESLint now supports parallel linting with a new --concurrency flag, delivering major speed gains and closing a 10-year-old feature request.
Research
/Security News
A malicious Go module posing as an SSH brute forcer exfiltrates stolen credentials to a Telegram bot controlled by a Russian-speaking threat actor.