Security logs: delete old user security logs

Author: stsewd

readthedocs/audit/taks.py

@@ -0,0 +1,29 @@
+import logging
+
+from django.conf import settings
+from django.utils import timezone
+
+from readthedocs.audit.models import AuditLog
+from readthedocs.worker import app
+
+log = logging.getLogger(__name__)
+
+
+@app.task(queue='web')
+def delete_old_personal_audit_logs(days=None):
+    """
+    Delete audit logs from related to users older the `days`.
+
+    We only delete logs related to users,
+    logs related to an organization are ignored here.
+    There are tasks com .com to delete those according to their plan.
+    """
+    days = days or settings.RTD_AUDITLOGS_DEFAULT_RETENTION_DAYS
+    days_ago = timezone.now() - timezone.timedelta(days=days)
+    audit_logs = AuditLog.objects.filter(
+        log_user_id__isnull=False,
+        log_organization_id__isnull=True,
+        created__lt=days_ago,
+    )
+    log.info("Deleting old audit logs from users. days=%s logs=%s", days, audit_logs.count())
+    audit_logs.delete()

readthedocs/settings/base.py

@@ -422,6 +422,11 @@ def TEMPLATES(self):
             'schedule': crontab(minute=0, hour=1),
             'options': {'queue': 'web'},
         },
+        'every-week-delete-old-personal-audit-logs': {
+            'task': 'readthedocs.audi.tasks.delete_old_personal_audit_logs',
+            'schedule': crontab(day_of_week='wednesday', hour=7, minute=0),
+            'options': {'queue': 'web'},
+        },
         'every-day-resync-sso-organization-users': {
             'task': 'readthedocs.oauth.tasks.sync_remote_repositories_organizations',
             'schedule': crontab(minute=0, hour=4),