topic Auditing Permission Changes in Alfresco Archive

Auditing Permission Changes

arjuncbe — Thu, 10 Nov 2016 17:19:03 GMT

Hello,I'm trying to find out which user changes permissions on a node in Alfresco Community edition. Things I have tried so far1. I can retrieve the alfresco-access logs via REST but I do not see any event rasied when permissions on a node changes.2. cmischangelog produces a "Security" change event

Re: Auditing Permission Changes

afaust — Thu, 10 Nov 2016 19:42:25 GMT

Although the name might imply it, system.auditableData does not relate to the Audit feature - it only refers to the cm:auditable aspect and the data it maintains (creation / modification user and timestamp).

Using alfresco-api should work as long as the PermissionService public service bean is properly used. Simply enabling alfresco-api is not enough though - that only produces audit data but does not record it. You need to configure an Audit application to actually record the data for the audit query to return. See audit configuration for details.

Re: Auditing Permission Changes

arjuncbe — Thu, 24 Nov 2016 10:32:19 GMT

Thanks. I did realise that system.auditableData controls modifying user and was looking to make the person who changed acl on a node to be modified user.

Your pointer was helpful and configuring a custom audit app to extract and then record the necessary entries solved my issue.