-
Notifications
You must be signed in to change notification settings - Fork 8
auditor
cardoppler edited this page Jun 22, 2013
·
4 revisions
Module for creating and reading audit logs.
The log collects the events happening in the system, such as data flows in/out, users' app authorization, ...
HMAC chains and evolving keys are used to provide "forward-integrity".
Permissions are checked using django.auth.
Settings comes from service_config.py file.
The backend is mongoDB. Each user has his own log trail which corresponds to a collection. A table stores <user,key> pairs.
In its current state, logger append-only functions needs to be called by other classes passing the event to store as input. A checker method allows the user to verify the integrity of his own audit trail.
[More to come]