Uploaded image for project: 'OpenOLAT'
  1. OpenOLAT
  2. OO-721

Logging of all security relevant actions

    XMLWordPrintable

    Details

      Description

      Logging is not everywhere consistently implemented. This issue is about checking if logging is there and add it where it is missing.

      Audit log is needed:

      • CRUD operations on users, groups, learning resources
      • Add, remove memberships in courses and groups
      • Assign, modify, remove roles
      • Password change
      • Launch and close of courses
      • Launch, publish and close of course editor

      Audit log entries must contain:

      • Who executed action
      • The action (what)
      • The context (where)
      • The affected object

      We also have to streamline audit logging vs. db user activity logging

        Attachments

          Activity

            People

            • Assignee:
              srosse Stéphane Rossé
              Reporter:
              gnaegi Florian Gnägi
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:

                Time Tracking

                Estimated:
                Original Estimate - 1 day, 7 hours, 30 minutes
                1d 7h 30m
                Remaining:
                Remaining Estimate - 1 day, 7 hours, 30 minutes
                1d 7h 30m
                Logged:
                Time Spent - Not Specified
                Not Specified