Bug 1095653

Summary: RFE - Logging all user acitvity within the WebUI for auditing purposes
Product: [Community] Spacewalk Reporter: Louwrens Benadé <louwrens.benade>
Component: WebUIAssignee: Michael Mráka <mmraka>
Status: CLOSED DEFERRED QA Contact: Red Hat Satellite QA List <satqe-list>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 2.2   
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-03-24 13:22:40 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 737830    

Description Louwrens Benadé 2014-05-08 09:44:41 UTC
User-Agent:       Mozilla/5.0 (Windows NT 6.2; WOW64; rv:29.0) Gecko/20100101 Firefox/29.0
Build Identifier: 

While the XMLRPC API does log activity to /var/log/rhn/rhn_web_api.log, it seems the WebUI does not make calls via the API.

I have parsed through the rest of the logs, but could not find any usable data that could be used for audit tracking.

Reproducible: Always



Expected Results:  
An effective solution would be to intercept any activity made by a user account via the WebUI, recording the time of the event, the account, the action taken, the data presented for the action, as well as the result (success or failure) of the action.

Comment 1 Michael Mráka 2020-03-24 13:22:40 UTC
Spacewalk project as an upstream for Red Hat Satellite 5 product is going to be End Of Life on May 31 2020.

Spacewalk 2.10 has been released as the last release of this project.
https://github.com/spacewalkproject/spacewalk/wiki/ReleaseNotes210

Any new feature will not be included therefore closing remaining RFEs to set expectations properly.