Project

General

Profile

Feature #36193

mgr/dashboard: Audit REST API calls

Added by Volker Theile about 4 years ago. Updated over 1 year ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
General - Back-end
Target version:
% Done:

0%

Source:
Development
Tags:
Backport:
Reviewed:
Affected Versions:
Pull request ID:

Description

Add the ability to auditing REST API calls. This should include all requests that manipulate the configuration/cluster (e.g. PUT/POST/DELETE). It does not make sense to log GET request.

The following features should be included:
- Add config option to enable/disable audit logging
- Add config option to enable/disable the logging of the request payload

Nice to have:
- Add config option to filter what is logged (to reduce number of log messages)


Related issues

Related to mgr - Feature #36194: mgr: Add ability to trigger a cluster/audit log message from Python Resolved 09/26/2018

History

#1 Updated by Volker Theile about 4 years ago

  • Subject changed from mgr/dashboard: Audit all REST API calls to mgr/dashboard: Audit REST API calls

#2 Updated by Volker Theile about 4 years ago

  • Related to Feature #36194: mgr: Add ability to trigger a cluster/audit log message from Python added

#3 Updated by Volker Theile about 4 years ago

  • Description updated (diff)

#4 Updated by Volker Theile about 4 years ago

  • Description updated (diff)

#5 Updated by Lenz Grimmer about 4 years ago

  • Status changed from New to 4

#6 Updated by Lenz Grimmer about 4 years ago

  • Status changed from 4 to In Progress

#7 Updated by Volker Theile about 4 years ago

  • Status changed from In Progress to Fix Under Review

#9 Updated by Lenz Grimmer about 4 years ago

  • Status changed from Fix Under Review to Resolved

#10 Updated by Lenz Grimmer almost 4 years ago

  • Pull request ID set to 24475

#11 Updated by Ernesto Puerta over 1 year ago

  • Project changed from mgr to Dashboard
  • Category changed from 146 to General - Back-end

Also available in: Atom PDF