ORNL / DataFed

A Federated Scientific Data Management System
https://ornl.github.io/DataFed/
Other
18 stars 14 forks source link

System - Add additional logging for specific user actions #609

Closed dvstans closed 3 years ago

dvstans commented 3 years ago

Due to a recent hack, it's become evident that there is not enough logging to detect/track a malicious user. Need to add:

All of this logging should include date/time, user ID, source IP, and action with enough context for useful debugging

dvstans commented 3 years ago

This has been added except for record manipulation logging. This needs to be done in a user-accessible manner and will be addressed as part of the data events/notifications feature.