Audit log when Document access is forbidden (User Cannot Read the Document)
How to create a Audit Log (or even a History line of Document) in Nuxeo when a User that don't have permission to read the , but try to access with a permalink?
That are some way to do by extension point?
I know is possible to do by listening events on document. (https://doc.nuxeo.com/display/NXDOC/Audit#Audit-Event)
But dont exists any event like “no_access_granted_for_document” or some other way to do?
-I think the Access Check (hasPermission) happens before the Audit be available for. I'm wrong?
 |
Klyff Harlley
Member (237) 1 2 1 |
03/05/2016 ( History) |
You're right, there's no event sent when permissions checks failed and access to a document is denied. So what you're trying to do is not currently possible without changing some code inside Nuxeo.
 |
Florent Guillaume
Member (36K) 6 8 8 |
03/31/2016 ( History) |
Yes, I know that.
Thank you very much Florent!
|
Klyff Harlley
Member (237) 1 2 1 |
04/03/2016 ( History) |
Hi Florent.
Yes, I thought about it. So, I'll try doing it inside AbstractSession.java (hasPermission methods), for having the event fired and a simple contrib to handle that event. It's be a good way? What do you think?
Thanks!
|
Klyff Harlley
Member (237) 1 2 1 |
03/31/2016 ( History) |
CoreSession.getDocuments does this, or Nuxeo Drive. Maybe DefaultNuxeoExceptionHandler or a subclass, when calling ExceptionHelper.isSecurityError, would be a better location.Thanks Florent!!!