DSD-DBS / capella-collab-manager

A web app for collaboration on Capella (MBSE) projects
https://dsd-dbs.github.io/capella-collab-manager/
Apache License 2.0
20 stars 3 forks source link

Add hashed username with rotating salt to annotations / monitoring #1606

Open MoritzWeber0 opened 2 months ago

MoritzWeber0 commented 2 months ago

For monitoring purposes, it's important to know how many sessions by unique users we have during a day. Otherwise, it's not possible to see if a user has 20 sessions or if 20 users have one session each.

On the other hand, we are not allowed to track & store user activity. Therefore, we can't just add the username to the session annotations.

Instead, we could store a salt in the database, which is updated each day. We could then add the hashed & salted username to the annotations. While it's possible to track back the hash to the username (only with technical knowledge and if access to the salt / database is given) on the same day, it's no longer possible after the salt is renewed. Therefore, it's not possible to track user activity for times before the current day using our monitoring dashboard.