Audit store

From HiWiki

Jump to: navigation, search

PING Discovery: Pilot implementasjon og utforskning av PING -> Security -> Audit store

The audit store is used to log audit messages in records. When an action is performed, the action is audited so that the record owners have an idea of what is being done to their records.

An audit message consists of the following:

  • Date - when the action occurred
  • ActorId - who is performing the action
  • IsPermitted - whether the action was allowed or not
  • ActionUrn - ex. urn:org:chip:ping:action:authenticate (corresponds to the action responders)(see org.chip.ping.xml.urns.PingTalkUrns)
  • ResourceUrn - ex. urn:org:chip:ping:resource:authenticate (see org.chip.ping.xml.urns.PingResourceUrns)
  • Additional text

In DefaultActionResponder, the audit message is stored both in the audit store and the record store.

Note: Since the store is encrypted, the audit store is also encrypted. It is therefore not possible to read the content. We have no functionality presently to read the information from the audit store. Best way to find out how this can be done would be to contact the Indivo team.

Retrieved from "http://hiwiki.idi.ntnu.no/hiwiki/index.php/Audit_store"