Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-10820

In WebDav browser interface, the folder listing action triggers READ audit activity

    Details

    • Type: Service Pack Request
    • Status: Closed (View Workflow)
    • Resolution: Fixed
    • Affects Version/s: 4.2.0.3
    • Fix Version/s: 4.2.3
    • Component/s: Auditing
    • Labels:
      None

      Description

      [Steps to reproduce]

      1. Set the alfresco-global.properties settings as follow:

      audit.enabled=true
      audit.alfresco-access.enabled=true
      audit.alfresco-access.sub-actions.enabled=true

      2. Turn logging on in the log4j.properties as follow:

      log4j.appender.File.Threshold=TRACE
      log4j.logger.org.alfresco.repo.audit.access.AccessAuditor=TRACE

      3. Start Alfresco, in Share as admin, upload a few image (JPG) files to a folder, I just uploaded them to Repository.
      4. In a browser, connect to Alfresco via WebDAV: http://localhost:8080/alfresco/webdav and browser to the folder containing the images. If you've uploaded them under Repository root, you should already be there.
      5. Look at the log and you will see a READ audit activity is displayed for each image document.
      6. Refresh the browser and look at the log again. A new set of READ audit activity is displayed for each image document.

      12:37:05,950 TRACE [org.alfresco.repo.audit.access.AccessAuditor] 
      		/alfresco-access/transaction/action=READ
      		/alfresco-access/transaction/node=workspace://SpacesStore/459dd589-07f4-48a3-af9b-77c65be914e6
      		/alfresco-access/transaction/path=/app:company_home/cm:2012-05-26 14.11.46.jpg
      		/alfresco-access/transaction/sub-actions=readContent
      		/alfresco-access/transaction/type=cm:content
      		/alfresco-access/transaction/user=admin
      		--- sub actions ---
      		/alfresco-access/transaction/sub-action/0/action=readContent
      		/alfresco-access/transaction/sub-action/1/action=readContent
      		/alfresco-access/transaction/sub-action/10/action=readContent
      		/alfresco-access/transaction/sub-action/11/action=readContent
      		/alfresco-access/transaction/sub-action/12/action=readContent
      		/alfresco-access/transaction/sub-action/13/action=readContent
      		/alfresco-access/transaction/sub-action/14/action=readContent
      		/alfresco-access/transaction/sub-action/15/action=readContent
      		/alfresco-access/transaction/sub-action/16/action=readContent
      		/alfresco-access/transaction/sub-action/17/action=readContent
      		/alfresco-access/transaction/sub-action/18/action=readContent
      		/alfresco-access/transaction/sub-action/19/action=readContent
      		/alfresco-access/transaction/sub-action/2/action=readContent
      		/alfresco-access/transaction/sub-action/3/action=readContent
      		/alfresco-access/transaction/sub-action/4/action=readContent
      		/alfresco-access/transaction/sub-action/5/action=readContent
      		/alfresco-access/transaction/sub-action/6/action=readContent
      		/alfresco-access/transaction/sub-action/7/action=readContent
      		/alfresco-access/transaction/sub-action/8/action=readContent
      		/alfresco-access/transaction/sub-action/9/action=readContent
      12:37:05,997 TRACE [org.alfresco.repo.audit.access.AccessAuditor] 
      		/alfresco-access/transaction/action=READ
      		/alfresco-access/transaction/node=workspace://SpacesStore/07dbeba8-1ac1-4a0b-8478-c70dcd5d5cdd
      		/alfresco-access/transaction/path=/app:company_home/cm:Consulting Timeline and Sweet Spot.jpg
      		/alfresco-access/transaction/sub-actions=readContent
      		/alfresco-access/transaction/type=cm:content
      		/alfresco-access/transaction/user=admin
      		--- sub actions ---
      		/alfresco-access/transaction/sub-action/0/action=readContent
      		/alfresco-access/transaction/sub-action/1/action=readContent
      		/alfresco-access/transaction/sub-action/10/action=readContent
      		/alfresco-access/transaction/sub-action/11/action=readContent
      		/alfresco-access/transaction/sub-action/12/action=readContent
      		/alfresco-access/transaction/sub-action/13/action=readContent
      		/alfresco-access/transaction/sub-action/14/action=readContent
      		/alfresco-access/transaction/sub-action/15/action=readContent
      		/alfresco-access/transaction/sub-action/16/action=readContent
      		/alfresco-access/transaction/sub-action/17/action=readContent
      		/alfresco-access/transaction/sub-action/18/action=readContent
      		/alfresco-access/transaction/sub-action/19/action=readContent
      		/alfresco-access/transaction/sub-action/2/action=readContent
      		/alfresco-access/transaction/sub-action/3/action=readContent
      		/alfresco-access/transaction/sub-action/4/action=readContent
      		/alfresco-access/transaction/sub-action/5/action=readContent
      		/alfresco-access/transaction/sub-action/6/action=readContent
      		/alfresco-access/transaction/sub-action/7/action=readContent
      		/alfresco-access/transaction/sub-action/8/action=readContent
      		/alfresco-access/transaction/sub-action/9/action=readContent
      12:37:06,060 TRACE [org.alfresco.repo.audit.access.AccessAuditor] 
      		/alfresco-access/transaction/action=READ
      		/alfresco-access/transaction/node=workspace://SpacesStore/6378a927-3083-4c42-b490-ed81c12fb3cd
      		/alfresco-access/transaction/path=/app:company_home/cm:2012-05-18 18.11.40.jpg
      		/alfresco-access/transaction/sub-actions=readContent
      		/alfresco-access/transaction/type=cm:content
      		/alfresco-access/transaction/user=admin
      		--- sub actions ---
      		/alfresco-access/transaction/sub-action/0/action=readContent
      		/alfresco-access/transaction/sub-action/1/action=readContent
      		/alfresco-access/transaction/sub-action/10/action=readContent
      		/alfresco-access/transaction/sub-action/11/action=readContent
      		/alfresco-access/transaction/sub-action/12/action=readContent
      		/alfresco-access/transaction/sub-action/13/action=readContent
      		/alfresco-access/transaction/sub-action/14/action=readContent
      		/alfresco-access/transaction/sub-action/15/action=readContent
      		/alfresco-access/transaction/sub-action/16/action=readContent
      		/alfresco-access/transaction/sub-action/17/action=readContent
      		/alfresco-access/transaction/sub-action/18/action=readContent
      		/alfresco-access/transaction/sub-action/19/action=readContent
      		/alfresco-access/transaction/sub-action/2/action=readContent
      		/alfresco-access/transaction/sub-action/3/action=readContent
      		/alfresco-access/transaction/sub-action/4/action=readContent
      		/alfresco-access/transaction/sub-action/5/action=readContent
      		/alfresco-access/transaction/sub-action/6/action=readContent
      		/alfresco-access/transaction/sub-action/7/action=readContent
      		/alfresco-access/transaction/sub-action/8/action=readContent
      		/alfresco-access/transaction/sub-action/9/action=readContent
      12:37:06,098 TRACE [org.alfresco.repo.audit.access.AccessAuditor] 
      		/alfresco-access/transaction/action=READ
      		/alfresco-access/transaction/node=workspace://SpacesStore/4515f4d8-2a19-4070-9686-c9640f11e028
      		/alfresco-access/transaction/path=/app:company_home/cm:.DS_Store
      		/alfresco-access/transaction/sub-actions=readContent
      		/alfresco-access/transaction/type=cm:content
      		/alfresco-access/transaction/user=admin
      		--- sub actions ---
      		/alfresco-access/transaction/sub-action/0/action=readContent
      		/alfresco-access/transaction/sub-action/1/action=readContent
      		/alfresco-access/transaction/sub-action/10/action=readContent
      		/alfresco-access/transaction/sub-action/11/action=readContent
      		/alfresco-access/transaction/sub-action/12/action=readContent
      		/alfresco-access/transaction/sub-action/13/action=readContent
      		/alfresco-access/transaction/sub-action/2/action=readContent
      		/alfresco-access/transaction/sub-action/3/action=readContent
      		/alfresco-access/transaction/sub-action/4/action=readContent
      		/alfresco-access/transaction/sub-action/5/action=readContent
      		/alfresco-access/transaction/sub-action/6/action=readContent
      		/alfresco-access/transaction/sub-action/7/action=readContent
      		/alfresco-access/transaction/sub-action/8/action=readContent
      		/alfresco-access/transaction/sub-action/9/action=readContent
      

      [Expected result]
      File listing via WebDAV in a browser should not trigger READ audit.

        Attachments

          Structure

            Activity

              People

              • Assignee:
                closedbugs Closed Bugs
                Reporter:
                ctan Craig Tan
              • Votes:
                0 Vote for this issue
                Watchers:
                6 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0 minutes
                  0m
                  Logged:
                  Time Spent - 1 week, 2 days
                  1w 2d

                    Structure Helper Panel