[jira] Created: (MRM-1195) Add access (i.e. download) logging to audit log

Add access (i.e. download) logging to audit log
-----------------------------------------------

                 Key: MRM-1195
                 URL: http://jira.codehaus.org/browse/MRM-1195
             Project: Archiva
          Issue Type: Improvement
            Reporter: Rob ten Hove


Currently, the Archiva audit log only contains modification to the repositories. However, it would be very useful if also access (i.e. downloads) can be logged, especially for security reasons in business environments. I tried doing this with Tomcat, but then the GET requests are visible but the username is not.

Logging the downloads should be configurable: logging thousands of downloads from user 'guest' might not be desirable.

See also discussion on Archiva users mailinglist.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

       

     [ http://jira.codehaus.org/browse/MRM-1195?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brett Porter updated MRM-1195:
------------------------------

    Fix Version/s: 1.x

> Add access (i.e. download) logging to audit log
> -----------------------------------------------
>
>                 Key: MRM-1195
>                 URL: http://jira.codehaus.org/browse/MRM-1195
>             Project: Archiva
>          Issue Type: Improvement
>            Reporter: Rob ten Hove
>             Fix For: 1.x
>
>
> Currently, the Archiva audit log only contains modification to the repositories. However, it would be very useful if also access (i.e. downloads) can be logged, especially for security reasons in business environments. I tried doing this with Tomcat, but then the GET requests are visible but the username is not.
> Logging the downloads should be configurable: logging thousands of downloads from user 'guest' might not be desirable.
> See also discussion on Archiva users mailinglist.

--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira