Search code examples
ruby-on-railsrubyrubygemshipaa

Recommended Rails gem for user access?

Looking for a gem to "log user access" for HIPAA (and other) compliance. I guess this means tracking logins, logouts, and everything that the user does in between.

Are there any recommended gems to do this?

Solution

  • Rails already does logging, so the best solution was to add the following to the existing logs:

    1. Logins
    2. Logouts
    3. Currently logged in user to existing log entries. Rails already logging controller actions and parameters.

    Although the log is not the easiest data to analyze, there are no requirements about about it so it doesn't matter.