Setting Up User Action Auditing

To set up user action auditing, use the Object Classes section on the navigation panel:

NOTE. When roles of the information security administrator and the application administrator are separated, the Object Classes section is available only for the information security administrator.

The security manager can automatically audit operations executed by system subjects and log information about executed operations to the access protocol. The logged operations are divided into general that can be executed with all object types, and specific ones that can be executed only with specific object types. Operation history is maintained for each object type: object changes, permission changes, object deletion. If full history is maintained, object changes by all operations are saved to history.

To select object types:

Hold down the CTRL key to select specified strings.
Hold down the SHIFT key to select all strings from the current to the N string (previous selection is undone).

After executing one of the operations the object types are selected for the further setup of access permissions, auditing and history.

To change or view access permissions of object type, select the object. After executing the operation the Properties side panel opens. Set up parameters of discretionary access control, auditing, attributes.

To enable auditing where a set of logged operations of selected object type is determined:

Click the Auditing > Full Control button on the toolbar to enable all operations on the Operation Auditing tab.
Click the Auditing > Common Operations button on the toolbar to enable all operations, except specific ones, on the Operation Auditing tab.
Select checkboxes next to the required operations on the Operation Auditing tab of the Properties side panel.

After executing the operations, the access protocol will log operation auditing of subjects by selected operations.

To disable auditing of the selected object type:

Click the Auditing > Disable button on the toolbar.
Deselect checkboxes next to the operations on the Operation Auditing tab of the Properties side panel.

After executing the operations, the access protocol will disable operation auditing of subjects by selected operations.

To disable history of the selected object type:

Click the History > Full Control button on the toolbar to enable all operations history on the Operation History tab.
Select checkboxes next to the required history operations on the Operation History tab of the Properties side panel.

After executing the operations, the history of object changes will be logged by selected operations.

To disable history:

Click the History > Disable button on the toolbar.
Deselect checkboxes next to the history operations on the Operation History tab of the Properties side panel.

After executing the operations, the history of object changes by selected operations will be disabled.

NOTE. When history is enabled, frequent changing of repository objects may result in significant increase in volume of the system table, which stores history.

NOTE. Changing of permissions and disabling of auditing and history is available for several selected objects.

NOTE. If section parameters have been changed, an attempt to go to another section of the security manager or to close it displays a request to apply the changed settings.

Setting Up User Action Auditing

Adding Attributes