Project

General

Profile

Feature #36193

mgr/dashboard: Audit REST API calls

Added by Volker Theile 3 months ago. Updated about 1 month ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
dashboard/backend
Target version:
Start date:
09/26/2018
Due date:
% Done:

0%

Source:
Development
Tags:
Backport:
Reviewed:
Affected Versions:
Pull request ID:

Description

Add the ability to auditing REST API calls. This should include all requests that manipulate the configuration/cluster (e.g. PUT/POST/DELETE). It does not make sense to log GET request.

The following features should be included:
- Add config option to enable/disable audit logging
- Add config option to enable/disable the logging of the request payload

Nice to have:
- Add config option to filter what is logged (to reduce number of log messages)


Related issues

Related to mgr - Feature #36194: mgr: Add ability to trigger a cluster/audit log message from Python Resolved 09/26/2018

History

#1 Updated by Volker Theile 3 months ago

  • Subject changed from mgr/dashboard: Audit all REST API calls to mgr/dashboard: Audit REST API calls

#2 Updated by Volker Theile 3 months ago

  • Related to Feature #36194: mgr: Add ability to trigger a cluster/audit log message from Python added

#3 Updated by Volker Theile 3 months ago

  • Description updated (diff)

#4 Updated by Volker Theile 3 months ago

  • Description updated (diff)

#5 Updated by Lenz Grimmer 3 months ago

  • Status changed from New to Feedback

#6 Updated by Lenz Grimmer 3 months ago

  • Status changed from Feedback to In Progress

#7 Updated by Volker Theile 2 months ago

  • Status changed from In Progress to Need Review

#9 Updated by Lenz Grimmer about 1 month ago

  • Status changed from Need Review to Resolved

Also available in: Atom PDF