[Sommaire] [Imprimer]

   1  *Title: Audit trailing
   2  
   3  *Incentive:
   4  At big sites with many admins / users / editors you need a better logging.
   5  
   6  *Documentation:
   7  The possibility to audit some things like user name, time or IP address etc 
   8  when removing content, assigning sections etc.
   9  
  10  The new settings have been added:
  11  
  12  - audit.ini[AuditSettings].LogDir
  13    Where the log files should be placed.
  14  - audit.ini[AuditSettings].Audit
  15    If 'enabled' the possibility will be enabled.
  16  - audit.ini[AuditSettings].AuditFileNames[]
  17    Audit file names setting.
  18    The key of AuditFileNames[] is the name of audit and value is file name.
  19       For example:
  20       AuditFileNames[<name of audit>]=<file name>
  21  
  22  ***********
  23  For example:
  24  
  25  # Failed login attempts will be logged
  26  AuditFileNames[user-failed-login]=failed_login.log
  27  (If audit of failed login is not needed just comment or remove this line.)
  28  
  29  ************
  30  Always clients IP address, time and user name will be logged.
  31  Things which can be logged:
  32  - failed login attempts 
  33  - user IP address
  34  - who deletes which content (node id / object id / content name)
  35  - who moves content (node id / old parent / new parent / object name)
  36  - who changes which role(s) (role id / role name)
  37  - who assigns which role to whom (role id / role name)
  38  - who assigns which section at which node (section id / section name)
  39  - who deleted which order in shop (user / order id)
  40  
  41  ***********
  42  *Usage
  43  
  44  If you want to use another audit you should:
  45  1. Add audit name as KEY and log file name as VALUE to audit.ini[AuditSettings].AuditFileNames[].
  46     (e.g. AuditFileNames[user-login]=login.log)
  47  2. Set audit.ini[AuditSettings].Audit to 'enabled'
  48  3. Use php code like:
  49  
  50         include_once ( "kernel/classes/ezaudit.php" );
  51         eZAudit::writeAudit( 'user-login', array( 'User id' => <userID>, 
  52                                                   'User login' => <userLogin>, 
  53                                                   'Name of something' => <valueOfSomething> ) );