You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@archiva.apache.org by "Rob ten Hove (JIRA)" <ji...@codehaus.org> on 2009/06/02 13:21:42 UTC
[jira] Created: (MRM-1195) Add access (i.e. download) logging to
audit log
Add access (i.e. download) logging to audit log
-----------------------------------------------
Key: MRM-1195
URL: http://jira.codehaus.org/browse/MRM-1195
Project: Archiva
Issue Type: Improvement
Reporter: Rob ten Hove
Currently, the Archiva audit log only contains modification to the repositories. However, it would be very useful if also access (i.e. downloads) can be logged, especially for security reasons in business environments. I tried doing this with Tomcat, but then the GET requests are visible but the username is not.
Logging the downloads should be configurable: logging thousands of downloads from user 'guest' might not be desirable.
See also discussion on Archiva users mailinglist.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] Updated: (MRM-1195) Add access (i.e. download) logging to
audit log
Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
[ http://jira.codehaus.org/browse/MRM-1195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Brett Porter updated MRM-1195:
------------------------------
Fix Version/s: 1.x
> Add access (i.e. download) logging to audit log
> -----------------------------------------------
>
> Key: MRM-1195
> URL: http://jira.codehaus.org/browse/MRM-1195
> Project: Archiva
> Issue Type: Improvement
> Reporter: Rob ten Hove
> Fix For: 1.x
>
>
> Currently, the Archiva audit log only contains modification to the repositories. However, it would be very useful if also access (i.e. downloads) can be logged, especially for security reasons in business environments. I tried doing this with Tomcat, but then the GET requests are visible but the username is not.
> Logging the downloads should be configurable: logging thousands of downloads from user 'guest' might not be desirable.
> See also discussion on Archiva users mailinglist.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira