Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-13818

Audit Service incorrectly uses realm template settings for blacklisting

    Details

    • Type: Bug
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 6.5.0
    • Fix Version/s: None
    • Component/s: audit logging
    • Labels:
    • Target Version/s:

      Description

      Bug description

      When applying blacklisting filters to audit events, AM incorrectly reads the realm defaults configuration from the Global Audit service rather than the actual global configuration.

      How to reproduce the issue

      1. Login to the AM admin console as amadmin
      2. Navigate to Configuration > Global Services > Audit Logging
      3. Remove "/config/before" and "/config/after" from the "Field exclusion policies" on the "Global Attributes" tab
      4. Save changes
      5. Make other config changes and review the ~/openam/openam/log/config.audit.json audit log
      Expected behaviour
      Audit events saved to the ~/openam/openam/log/config.audit.json audit log should have the before and after fields populated.
      
      Current behaviour
      Audit events saved to the ~/openam/openam/log/config.audit.json audit log do not have the before and after fields populated.
      

      Work around

      1. Login to the AM admin console as amadmin
      2. Navigate to Configuration > Global Services > Audit Logging
      3. Remove "/config/before" and "/config/after" from the "Field exclusion policies" on the "Realm Defaults" tab
      4. Save changes
      5. Make other config changes and review the ~/openam/openam/log/config.audit.json audit log
      6. The filter adjustments are then applied by AM

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              craig.mcdonnell Craig McDonnell
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: