chore: audit organization member add/delete/edit (#13620)

* chore: audit organization member add/removals

coderd/database/dump.sql

@@ -148,7 +148,8 @@ CREATE TYPE resource_type AS ENUM (
     'health_settings',
     'oauth2_provider_app',
     'oauth2_provider_app_secret',
-    'custom_role'
+    'custom_role',
+    'organization_member'
 );
 
 CREATE TYPE startup_script_behavior AS ENUM (

coderd/database/migrations/000220_audit_org_member.up.sql

@@ -0,0 +1 @@
+ALTER TYPE resource_type ADD VALUE IF NOT EXISTS 'organization_member';

coderd/database/modelmethods.go

@@ -60,6 +60,18 @@ func (s WorkspaceAgentStatus) Valid() bool {
 	}
 }
 
+type AuditableOrganizationMember struct {
+	OrganizationMember
+	Username string `json:"username"`
+}
+
+func (m OrganizationMember) Auditable(username string) AuditableOrganizationMember {
+	return AuditableOrganizationMember{
+		OrganizationMember: m,
+		Username:           username,
+	}
+}
+
 type AuditableGroup struct {
 	Group
 	Members []GroupMember `json:"members"`

coderd/database/models.go

@@ -1223,6 +1223,7 @@ const (
 	ResourceTypeOauth2ProviderApp       ResourceType = "oauth2_provider_app"
 	ResourceTypeOauth2ProviderAppSecret ResourceType = "oauth2_provider_app_secret"
 	ResourceTypeCustomRole              ResourceType = "custom_role"
+	ResourceTypeOrganizationMember      ResourceType = "organization_member"
 )
 
 func (e *ResourceType) Scan(src interface{}) error {
@@ -1277,7 +1278,8 @@ func (e ResourceType) Valid() bool {
 		ResourceTypeHealthSettings,
 		ResourceTypeOauth2ProviderApp,
 		ResourceTypeOauth2ProviderAppSecret,
-		ResourceTypeCustomRole:
+		ResourceTypeCustomRole,
+		ResourceTypeOrganizationMember:
 		return true
 	}
 	return false
@@ -1301,6 +1303,7 @@ func AllResourceTypeValues() []ResourceType {
 		ResourceTypeOauth2ProviderApp,
 		ResourceTypeOauth2ProviderAppSecret,
 		ResourceTypeCustomRole,
+		ResourceTypeOrganizationMember,
 	}
 }