[directory-fortress-commander] branch wicket9 updated: audit trail

[sm...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

smckinney pushed a commit to branch wicket9
in repository https://gitbox.apache.org/repos/asf/directory-fortress-commander.git


The following commit(s) were added to refs/heads/wicket9 by this push:
     new 63cff39  audit trail
63cff39 is described below

commit 63cff3950841375ea6b30e92332d01d69aada4b5
Author: Shawn McKinney <sm...@symas.com>
AuthorDate: Sat Apr 9 13:23:37 2022 -0500

    audit trail
---
 README-SECURITY-MODEL.md | 17 +++++++++++------
 1 file changed, 11 insertions(+), 6 deletions(-)

diff --git a/README-SECURITY-MODEL.md b/README-SECURITY-MODEL.md
index 2b3eada..4498a38 100644
--- a/README-SECURITY-MODEL.md
+++ b/README-SECURITY-MODEL.md
@@ -28,8 +28,9 @@
 - SECTION 4. Apache Wicket Links
 - SECTION 5. Apache Wicket Buttons
 - SECTION 6. Additional Administrative Role-Based Access Control (ARBAC) Checks
-- SECTION 7. Policy load
-- SECTION 8. Verification
+- SECTION 7. Audit Trail / History
+- SECTION 8. Policy load
+- SECTION 9. Verification
 
 ## Document Overview
 
@@ -224,14 +225,18 @@ dc=example,dc=com
 - In addition to the admin perm checks, as described above, when buttons get loaded, the Apache Fortress Web optionally perform checks in its API calls.
 - These occur when Apache Fortress Core's APIs are invoked in a certain way -- when passing in an ARBAC session object. 
 - For more on how ARBAC checks work: [Apache Fortress Rest Security Model](https://github.com/apache/directory-fortress-enmasse/blob/master/README-SECURITY-MODEL.md)
-- By default, the Apache Fortress Web does not enforce these additional ARBAC checks in the APIs. 
+- By default, the Apache Fortress Web does not enforce these additional ARBAC checks in the APIs.
 - To enable, add the following declaration to the fortress.properties:
 
  ```
  is.arbac02=true
  ```
 
-## 7. Policy load
+## 7. Audit Trail / History
+
+TODO: add
+
+## 8. Policy load
 
  - The [Policy load file](./src/main/resources/FortressWebDemoUsers.xml) is a script that creates the roles and permissions that this app checks during code execution.  This step is performed during setup as described in the project's setup documentation. 
  - Test Users 
@@ -244,8 +249,8 @@ dc=example,dc=com
 | Group Admin | test3  | false | false | false | false | false      | false | false | false   | false   | false      | false    | false    | true    | false   | false | false |
 
  * All test passwords = 'password'
-
-## 8. Verification
+ 
+## 9. Verification
  
 - Run the Selenium Tests: [FortressWebSeleniumITCase](src/test/java/org/apache/directory/fortress/web/integration/FortressWebSeleniumITCase.java)
 - Required security policy for selenium tests is loaded: a or b and c: