Uploaded image for project: 'OpenOLAT'
  1. OpenOLAT
  2. OO-3478

Remove personal data from olat.log

    XMLWordPrintable

    Details

    • Type: Improvement
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 12.5
    • Component/s: Logging
    • Labels:

      Description

      The olat.log must not contain information that reveal the real identity of a user.

      The idea is when referring to a user only the identity.key shall be logged. As long as a user exists in OpenOLAT, the real identity can be revealed by looking up the identity key.

      When a user is deleted the log entries remain. However, since the log does not contain "clear text" information about the user, the users identity can not be revealed anymore (unless a backup is restored to lookup the identity key). The backup policy must thus be part of the disclaimer. 

      To solve this, mostly the Tracing class must be fixed. Real-World log files should also be analysed to see if there are specific log messages that needs adjustments. 

       

      Exceptions:

      • IP addresses are logged and kept during backup time. They help us associate the apache log with the olat.log. The data and privacy policy must make users aware of this.
      • Logging actions that have an audit character where a user performs an action not as normal user but as a role of the institution can optionally log information about the identity. E.g. such actions could be system administration actions like system configuration or creating or deleting a user. We do not actively add this data, however when it is there we do not try to clean it from the log. 

       

        Attachments

          Activity

            People

            • Assignee:
              srosse Stéphane Rossé
              Reporter:
              gnaegi Florian Gnägi
              Tester:
              Mandy Menzel
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 15 minutes
                15m