Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-10070

Provide audit filter capabilities for audit applications

    Details

    • Type: Service Pack Request
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 4.1.6
    • Fix Version/s: 4.1.10
    • Component/s: Auditing
    • Labels:
      None

      Description

      Currently, audit filters reject data provided by audit data producers (Inbound Audit Values) as described in the attached article.

      This capability is insufficient for any Alfresco applications that makes more than just casual use of Auditing. In a scenario where multiple Audit Applications consume the data from the same data producer (alfresco-api or alfresco-access), filtering inbound data is no longer practical as the filter necessary for one application may suppress data relevant to the second application. On the other hand, having no filter at all can lead to excessive data collected by Audit Applications and introduce significant scalability issues.

      Customers are requesting that the following enhancement(s) or sensible sub-sets thereof be considered for future product development:

      1) Support of inbound filters specific to an Audit Application (after path mapping has occurred)
      2) Support of outbound filters specific to an Audit Application (i.e. reject audit entries based on calculated / extracted data)
      3) Support of registrable, custom filter implementations (in addition to sole the simple property-based filter currently in place)
      4) Support of aggregation-capable data extractors (audit data extractor with access to multiple inbound values)

      These should help customers / developers to improve audit-based solutions to keep unnecessary data from being committed to the database while removing the potential for side-effects by only filtering on inbound values from data producers.

        Attachments

          Issue Links

            Activity

            Hide
            dhulley Derek Hulley added a comment - - edited

            I think that we have a bug here. The audit applications should not veto data that might be required by other applications.

            Show
            dhulley Derek Hulley added a comment - - edited I think that we have a bug here. The audit applications should not veto data that might be required by other applications.
            Hide
            dhulley Derek Hulley added a comment -

            Indeed, I would have expected to get the same inbound data for each of the applications app1, app2 and app3. This can be neatly demonstrated using a test rather than manually. Please set up the test as you describe and ensure that each application gets to audit the same data.

            Show
            dhulley Derek Hulley added a comment - Indeed, I would have expected to get the same inbound data for each of the applications app1, app2 and app3. This can be neatly demonstrated using a test rather than manually. Please set up the test as you describe and ensure that each application gets to audit the same data.

              People

              • Assignee:
                closedbugs Closed Bugs
                Reporter:
                mmancuso Marco Mancuso
              • Votes:
                1 Vote for this issue
                Watchers:
                12 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 3 days, 6 hours, 30 minutes
                  3d 6h 30m