Identify Heroku user account in running Rails console

Question

Is it possible to identify the heroku username of the current user connected to an app through a running console?

So say I connect to a rails console on my heroku app using

heroku run rails c --app my-app

I'd like to be able to run a command and have it print out:

heroku.user@example.com

Where heroku.user@example.com is the email / username of the user who connected to the console.

I tried a couple basic linux commands like

`whoami`

but you get a generic username like u12345

The goal is to instrument certain fields in our app with audit trails so that we can track when and who accessed sensitive information, as well as how they accessed it (CLI, through the Web UI, etc.)

score 3 · Answer 1 · answered Apr 12 '19 at 15:51

3

I just asked heroku this same question via a support ticket, and they do not currently support this functionality. That said, you can use heroku logs to see who and when a rails console was opened.

2019-04-12T15:48:05.727693+00:00 app[api]: Starting process with command `rails console` by user me@mycompany.org

answered Apr 12 '19 at 15:51

Julie

1,941
3
17
30

And where can we see this log? – Eduardo Santana Sep 14 '21 at 14:29
You can see it with `heroku logs`, or if you're saving your logs, then wherever you're saving them into. – Joshua Cheek Feb 14 '22 at 22:46

Identify Heroku user account in running Rails console

1 Answers1