Description of problem: whenever user creates a repository, there are 2 audit records created: ``` Admin added KATELLO/ROOT REPOSITORY foo_repo Added foo_repo to N/A ``` and ``` Admin updated KATELLO/ROOT REPOSITORY foo_repo Content N/A Missing(ID: 1541672884013) ``` Version-Release number of selected component (if applicable): 6.5.0-2 How reproducible: always Actual results: Content N/A Missing(ID: 1541672884013) Expected results: I would expect a single `create` audit with all the attributes of the repository in the record (with credentials and sensitive information masked) Additional info: 2 records with no info in them
update: this applies to all audits.
Created redmine issue https://projects.theforeman.org/issues/25437 from this bug
Upstream bug assigned to mhulan
found one more occurrence of Missing(ID: 4) - In audit_Type: bookmark, if someone adds a bookmark, the field "owner" has Missing(ID: 4) value. - btw, shall we publicly audit private bookmark actions?
Just discussed together with Kavita and Roman, this is consistent with host ownership and permission system in general. So we'll keep the current behavior for bookmarks.
okay, the audit now looks like this: Affected Organizations Affected Locations Content N/A [empty] Not sure what should be shown in the content - whether i put in the downstream url or not, the audit always shows [empty] for content. Looks pretty useless for me. I'd rather see some useful info about newly created repo, like "content type", "url", etc.
Moving this bug to POST for triage into Satellite 6 since the upstream issue https://projects.theforeman.org/issues/25437 has been resolved.
Do you know what the content attribute in this audit refers to? Thanks
Upstream bug assigned to kgaikwad
testing this on sat6.7.0 snap#10 the "Missing (ID.." message is gone now, but there are still 2 audit records created: The Create event (with all the info) and an Update event with: "Content N/A fooo" - can we drop the latter one?
(In reply to Roman Plevka from comment #29) > testing this on sat6.7.0 snap#10 > > the "Missing (ID.." message is gone now, but there are still 2 audit records > created: > > The Create event (with all the info) > and an Update event with: > "Content N/A fooo" > > - can we drop the latter one? Hello Roman, Actually, on repository creation it creates three audit records i.e create actions for Root Repository & Repository and update action for Root Repository. As per me, this audit record which shows content change in the root repository is not much informative. so yes, it is possible to drop this audit record for update action. But as Marek mentioned, it would be good to track it separately. And which includes removal of code changes that are added to display content instead of missing id. Thanks, Kavita
Created attachment 1673341 [details] screen1
Created attachment 1673343 [details] screen custom repo
VERIFIED on sat6.8.0-14 there's just a single CREATE audit record for the action with the following fields/values: Pulp [empty] Content view version 1 Relative path Default_Organization/Library/custom/dogfood/sattools Environment Library Root sattools
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (Important: Satellite 6.8 release), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2020:4366