Uploaded image for project: 'HPCC'
  1. HPCC
  2. HPCC-21279

ESP: File access requests should audit user access

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 7.0.12
    • Component/s: ESP
    • Labels:
      None

      Description

      Currently ESP is not auditing file access requests. An entry should be made into the Dali logs that follows the std audit format used elsewhere in the codebase.

       

      StringArray clusters;
      file->getClusterNames(clusters);
      StringBuffer outs;
      outs.appendf(",FileAccess,Thor,%s,%s,%s,%s,%s,%s,%" I64F "d,%d",
                      extended?"EXTEND":"READ",
                      globals->queryProp("@nodeGroup"),
                      job.queryUser(),
                      file->queryLogicalName(),
                      job.queryWuid(),
                      job.queryGraphName(),
                      file->getFileSize(false, false),clusters.ordinality());
      ForEachItemIn(i,clusters) {
          outs.append(',').append(clusters.item(i));
      }
      LOG(daliAuditLogCat,"%s",outs.str())
      

        Attachments

          Activity

            People

            • Assignee:
              wangkx Kevin Wang
              Reporter:
              mcmuja01 James McMullan
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: