search

richardschneider / sally

Securing your audit logs
MIT License
1 stars 0 forks source link

Record HTTP Host header #1

Closed richardschneider closed 8 years ago

richardschneider commented 8 years ago

As a auditor of a multi-tenancy application I want to know which tenant the audit event is about So that I can determine the accuracy of the records

richardschneider commented 8 years ago

Most multi-tenancy applications determine the tenant from the HTTP Host header. This should be added to the where field in the audit log entry.