Bug 1647781 - Audits contain no data (Added foo to Missing(ID: x))
Summary: Audits contain no data (Added foo to Missing(ID: x))
Keywords:
Status: ASSIGNED
Alias: None
Product: Red Hat Satellite 6
Classification: Red Hat
Component: Audit Log
Version: 6.5.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium vote
Target Milestone: 6.8.0
Assignee: Kavita
QA Contact: Roman Plevka
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-11-08 10:49 UTC by Roman Plevka
Modified: 2020-05-27 20:02 UTC (History)
6 users (show)

Fixed In Version: foreman-1.24.0, katello-3.14.0
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:


Attachments (Terms of Use)
screen1 (98.45 KB, image/png)
2020-03-25 09:14 UTC, Marek Hulan
no flags Details
screen custom repo (66.88 KB, image/png)
2020-03-25 09:15 UTC, Marek Hulan
no flags Details


Links
System ID Priority Status Summary Last Updated
Foreman Issue Tracker 25437 Normal Closed Audits contain no data (Added foo to Missing(ID: x)) 2020-05-28 07:24:31 UTC
Foreman Issue Tracker 26200 Normal Closed [Audit] Repository creation under product creates audit record with empty content 2020-05-28 07:24:31 UTC
Foreman Issue Tracker 26675 Normal Closed [Audit] Repository creation under product creates audit record with empty content 2020-05-28 07:24:31 UTC

Description Roman Plevka 2018-11-08 10:49:13 UTC
Description of problem:
whenever user creates a repository, there are 2 audit records created:

```
Admin  added    KATELLO/ROOT REPOSITORY  foo_repo
Added foo_repo to N/A
```
and

```
Admin  updated  KATELLO/ROOT REPOSITORY  foo_repo
Content  N/A  Missing(ID: 1541672884013)
```

Version-Release number of selected component (if applicable):
6.5.0-2

How reproducible:
always

Actual results:
Content  N/A  Missing(ID: 1541672884013)

Expected results:
I would expect a single `create` audit with all the attributes of the repository in the record (with credentials and sensitive information masked)

Additional info:
2 records with no info in them

Comment 1 Roman Plevka 2018-11-08 10:54:42 UTC
update: this applies to all audits.

Comment 4 Marek Hulan 2018-11-13 08:26:25 UTC
Created redmine issue https://projects.theforeman.org/issues/25437 from this bug

Comment 5 pm-sat@redhat.com 2018-11-13 11:07:17 UTC
Upstream bug assigned to mhulan@redhat.com

Comment 6 pm-sat@redhat.com 2018-11-13 11:07:19 UTC
Upstream bug assigned to mhulan@redhat.com

Comment 8 Roman Plevka 2018-11-23 16:50:52 UTC
found one more occurrence of Missing(ID: 4) - In audit_Type: bookmark, if someone adds a bookmark, the field "owner" has Missing(ID: 4) value.

- btw, shall we publicly audit private bookmark actions?

Comment 9 Marek Hulan 2018-11-27 09:32:54 UTC
Just discussed together with Kavita and Roman, this is consistent with host ownership and permission system in general. So we'll keep the current behavior for bookmarks.

Comment 10 Roman Plevka 2018-12-10 13:58:36 UTC
okay, the audit now looks like this:

Affected Organizations
Affected Locations
Content    N/A    [empty]

Not sure what should be shown in the content - whether i put in the downstream url or not, the audit always shows [empty] for content.
Looks pretty useless for me. I'd rather see some useful info about newly created repo, like "content type", "url", etc.

Comment 11 pm-sat@redhat.com 2018-12-10 15:08:50 UTC
Moving this bug to POST for triage into Satellite 6 since the upstream issue https://projects.theforeman.org/issues/25437 has been resolved.

Comment 12 pm-sat@redhat.com 2018-12-10 17:09:01 UTC
Moving this bug to POST for triage into Satellite 6 since the upstream issue https://projects.theforeman.org/issues/25437 has been resolved.

Comment 13 Marek Hulan 2018-12-20 15:54:35 UTC
Do you know what the content attribute in this audit refers to? Thanks

Comment 18 Bryan Kearney 2019-03-01 07:06:06 UTC
Upstream bug assigned to kgaikwad@redhat.com

Comment 24 Bryan Kearney 2019-09-09 12:06:07 UTC
Upstream bug assigned to mhulan@redhat.com

Comment 25 Bryan Kearney 2019-09-09 14:06:09 UTC
Upstream bug assigned to kgaikwad@redhat.com

Comment 26 Bryan Kearney 2019-09-09 14:06:11 UTC
Upstream bug assigned to kgaikwad@redhat.com

Comment 27 Bryan Kearney 2019-09-12 14:05:50 UTC
Upstream bug assigned to mhulan@redhat.com

Comment 29 Roman Plevka 2020-02-06 10:08:43 UTC
testing this on sat6.7.0 snap#10

the "Missing (ID.." message is gone now, but there are still 2 audit records created:

The Create event (with all the info)
and an Update event with:
"Content   N/A   fooo"

- can we drop the latter one?

Comment 31 Kavita 2020-02-07 11:39:08 UTC
(In reply to Roman Plevka from comment #29)
> testing this on sat6.7.0 snap#10
> 
> the "Missing (ID.." message is gone now, but there are still 2 audit records
> created:
> 
> The Create event (with all the info)
> and an Update event with:
> "Content   N/A   fooo"
> 
> - can we drop the latter one?


Hello Roman,

Actually, on repository creation it creates three audit records i.e create actions for Root Repository & Repository and update action for Root Repository.
As per me, this audit record which shows content change in the root repository is not much informative.
so yes, it is possible to drop this audit record for update action.


But as Marek mentioned, it would be good to track it separately.
And which includes removal of code changes that are added to display content instead of missing id.

Thanks, 
Kavita

Comment 32 Bryan Kearney 2020-02-23 01:06:05 UTC
Upstream bug assigned to kgaikwad@redhat.com

Comment 34 Bryan Kearney 2020-03-11 22:06:05 UTC
Upstream bug assigned to mhulan@redhat.com

Comment 38 Marek Hulan 2020-03-25 09:14:23 UTC
Created attachment 1673341 [details]
screen1

Comment 39 Marek Hulan 2020-03-25 09:15:55 UTC
Created attachment 1673343 [details]
screen custom repo

Comment 40 Bryan Kearney 2020-03-30 16:09:24 UTC
Upstream bug assigned to kgaikwad@redhat.com

Comment 41 Bryan Kearney 2020-04-22 20:23:07 UTC
Upstream bug assigned to mhulan@redhat.com

Comment 42 Bryan Kearney 2020-05-27 20:02:25 UTC
Upstream bug assigned to kgaikwad@redhat.com


Note You need to log in before you can comment on or make changes to this bug.