36
Views
4
Comments
Monitor access to entity data
Application Type
Reactive

Hello Community,

we're developing an application that stores sensitive personal data. One of our security team requirements is to monitor all access to this data for auditing purposes. Is there any way to log every operation (including get) on a specific entity? We are on a OS managed cloud, so we can't do this directly at the database level.

UserImage.jpg
Roman Scheinherr

Thanks @Márcio Carvalho
I've found this article, but I didn't find it useful for data reading logging.

2021-06-02 20-50-04
Márcio Carvalho

Sorry, that I could not help :( Maybe someone can give you an explanation for your "problem". If I knew I was more than happy to explain how to do it. I will follow anyways this post to see also how to do it.

2018-10-29 08-31-03
João Marques
 
MVP

Hi Roman,


I'm afraid you'll have to "implement" your audit.

You can however take a look at the components on the Forge, there are quite a few, take a look here:


In any case, audit trails present a very enticing challenge:

  • Table will grow considerably very fast. You'll likely have to consider archiving
  • You want the writes to be as fast as possible, so it doesn't impact user experience.


Those same challenges present themselves on OutSystems logging activities which will create the information in the Service Center, and it is always interesting to see the OutSystems architecture to solve it.


Kind Regards,
João

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.