Uploaded image for project: 'Service Packs and Hot Fixes'
  1. Service Packs and Hot Fixes
  2. MNT-8401

Audit filter for alfresco-access/logout does not work.

    Details

    • Type: Service Pack Request
    • Status: Closed (View Workflow)
    • Resolution: Fixed
    • Affects Version/s: 4.0
    • Fix Version/s: 4.1.7
    • Component/s: Auditing
    • Labels:
      None

      Description

      Audit filter for alfresco-access/logout does not work.

      This is related to the Jira#ALF-16023.
      The docs page describe how to set filter for alfresco-access
      http://docs.alfresco.com/4.0/topic/com.alfresco.enterprise.doc/concepts/audit-40-example-filter.html

      But, it does not work for the audit.filter.alfresco-access.logout.user. It will still create the audit entry like follows.
      I enabled the PropertyAuditFilter. log4j.logger.org.alfresco.repo.audit.PropertyAuditFilter=debug

      15:49:16,285 DEBUG [org.alfresco.repo.audit.AuditComponentImpl]
      New audit entry: 
    
      Application ID: 1
    
      Entry ID:       3004
    
      Values:         
        
      /alfresco-access/logout=null

    
      Audit Data: 
        
      /alfresco-access/logout/user=link

      The same usage for /alfresco-access/transaction/user works as follows,
      I set the filter like this. audit.filter.alfresco-api.transaction.user=~link;~System;~null;.*

      15:48:39,952 DEBUG [org.alfresco.repo.audit.PropertyAuditFilter] Rejected 
                /alfresco-access/transaction/user=null
    audit.filter.alfresco-access.transaction.user=~link;~System;~null;.*

      so the filter does not work only for the /alfresco-access/logout.

      [Steps to reproduce]

      1. Enable audit.
      Enable audit

      1. Audit configuration
        audit.enabled=true
        audit.tagging.enabled=true
        audit.alfresco-access.enabled=true
        audit.alfresco-access.sub-actions.enabled=true

      2. Create a user

      3. Set a filter for the created user.
      audit.filter.alfresco-access.logout.user=~link

      4. Login Share with the user, then logout the user.

      [Actual Behaviour]
      The filter does not work for the user. It still recorded as follows,

      curl -u admin:admin "http://localhost:8080/alfresco/service/api/audit/query/alfresco-access/alfresco-access/logout/user?verbose=true"

      {
      "id":3050,
      "application":"alfresco-access",
      "user":"link",
      "time":"2012-12-31T16:13:44.209+11:00",
      "values":

      { "\/alfresco-access\/logout\/user":"link" }

      [Expected Behaviour]
      The filter should work for the user.

      [Additional Information]
      The problem still persist on 4.0.2, 4.1.2.
      This problem happens also for /alfresco-access/login

        Attachments

          Issue Links

            Structure

              Activity

                People

                • Assignee:
                  closedbugs Closed Bugs
                  Reporter:
                  kkono Kazuyuki Kono
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  7 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved:

                    Time Tracking

                    Estimated:
                    Original Estimate - Not Specified
                    Not Specified
                    Remaining:
                    Remaining Estimate - 0 minutes
                    0m
                    Logged:
                    Time Spent - 3 days, 7 hours, 30 minutes
                    3d 7h 30m

                      Structure Helper Panel