search

globaleaks / whistleblowing-software

GlobaLeaks is free, open-source whistleblowing software enabling anyone to easily set up and maintain a secure reporting platform.
https://www.globaleaks.org
Other
1.22k stars 267 forks source link

CSV export of Audit Log "reports" tab, does not contain sub-status but an incomprehensible code #3028

Open elbill opened 3 years ago

elbill commented 3 years ago

Describe the bug CSV export of Audit Log "reports" does not contain sub-statuses even though they appear on the specific tab. Instead of the substatus it contains a code that do not know its origin. Instead of substatus a strange code appears that can not figure out what it means. To Reproduce Export csv file from admin audit log, reports tab, open it in excel and compare it with info that exists on the tab.

csv export b85de321-e337-492f-a4f1-f6b80d9d0ce6,2021-07-09T10:28:12.530573Z,2021-07-09T10:37:18.921253Z,3000-01-01T00:00:00Z,f444c46f-5f7f-4ccc-a840-e10776d1a485,closed,ff83ab2c-f631-4eeb-8679-be3338146c94,FALSE,1,0,1,2021-07-09T10:50:47.656573Z

example audit log b85de321-e337-492f-a4f1-f6b80d9d0ce6 | 09-07-2021 13:28 | 09-07-2021 13:37 | 01-01-3000 02:00 | CONTEXT | Closed(Malicious) | HTTPS | 1 | 0 | 1 | 09-07-2021 13:50

Expected behavior I would expect the csv to contain all the info in the reports tab including the substatus in a simple form

Desktop (please complete the following information):

Additional context Additionally it would be good to also include the serial number of the report in addition to the report id

evilaliv3 commented 3 years ago

Thank you for the feedback @elbill

Actually only the first tab of the Audit Log section is mapped on the real audit log of the application that tracks some of the important audit information and maintain them indefinitely

The others tab are instead just a print out of the different pages and they contain just the actuall table data.

For the moment we are getting sure to track the more relaveant information so that the system tracks it but the presentation part and the export part is unfortunately very limited. We acutally expect that any export wil always be implemented as a raw export containing ID in pleace of names in order to make object be uniquely identifiable.

elbill commented 3 years ago

OK understood @evilaliv3 thanks for the clarifications. Any type of export with names or with IDs would be fine (as long as it is consistent and we understand the relationship between the ID and the name)