Portus icon indicating copy to clipboard operation
Portus copied to clipboard
verified publisher icon SUSE

Audit logs are not immutable

Open flavio opened this issue 9 years ago • 3 comments

The audit logs can change over the time:

  1. user triggers webhook for namespace "foo"
  2. user downloads CSV audit file
  3. namespace "foo" is renamed "bar"
  4. user download CSV

The audit entry for event number 1 is reported in two different ways depending from the generation time. This is really wrong, the past events of the audit log should always stay the same!

flavio avatar May 25 '16 12:05 flavio

I've hopefully fixed most of the issues with #1144, but I haven't completely reviewed this yet.

mssola avatar Jan 19 '17 16:01 mssola

This is probably fixed, but I'll continue to investigate during the 2.4 release.

mssola avatar Jan 18 '18 10:01 mssola

This is probably fixed, but I'll continue to investigate during the 2.4 release.

Same as before. I think it's fine, but we need more tests. Plus, I fear that #767 is going to bring some instability on this front. So, I prefer to postpone this to work harder on the tests.

mssola avatar Jul 31 '18 14:07 mssola