User activity logs

[zh]

Hi,

we have faced with the following challenge.

Everybody who create a files in Alfresco (we use Community v5.1) can share any accessible documents so for us it is a security breach. My question, how we can 1) monitor; 2) control; and 3) block (if need) this possibility i.e. "Shared" feature of Alfresco?

We have searched user activity log in database, in Alfresco installation folder BUT no success.

Screenshot of "Shared" function is attached.

Thank you in advance for any help!

[cesarista]

Hi:

Some guidelines are given in the links below:

1, 2) To monitor and control:

- How to control public shared content in Alfresco - zylk 

How to manage public content in Alfresco with the help of virtual folders - Virtual Folders for deal... 

3) Block --> - More about quick shared functionality in Alfresco - zylk 

Finally, the next addon may be helpful for defining some expiration date on published documents.

GitHub - zylklab/zk-qshared-effectivity: Public url documents (qshared) with effectivity in Alfresco... 

Hope this helps.

Regards.

--C.

[zh]

Hi Cesar,

Firstly, thank you very much for your answer!

I have read the links you provided and I found not information concerning my request but let me note the links is very useful in part how to check aspect of documents.

1. - How to control public shared content in Alfresco - zylk (this article describes how to view document properties and aspects)

2. https://community.alfresco.com/external-link.jspa?url=https%3A%2F%2Fgithub.com%2Fzylklab%2Fzk-qshare...  (this addon is about shared options not a log information who made share a document last time)

In any way your information is very useful, but let me note I looking a way to monitor user activity log in part - Who set 'Shared' setting of on a document. 

Best regards,

Zh

[cesarista]

Hi:

You have to deep inside the links and check them properly. In 1) is talking about qshared model, about monitoring and controlling via custom queries and virtual folders. If you need info about who is sharing, please check qshare:sharedBy property in document details or via Node Browser.

If you need to log this info about the user in catalina.out, you can use the behaviour implemented in the addon as a template to write a line showing the property via logger.warn()

Regards.

--C.

[zh]

Dear Cesar,

Let me clarify my position. I think it will be inconvenient to check properties of every file in repositories to find who shared those files, also we should to understand that we can get information only about last changes (what if file shared several times by several peoples). So I think we need to catch 'Shared' events in real time to identify who shared a file.

At the current moment our Alfresco system sends to every site participant an information about users' activities (this Alfresco's default behavior and information what I need to get/catch). So I think there is some elegant/effective way to get this information from the database or from the log file BUT yet I do not know how.

Thanks Cesar!

Best regards,

Zh

[cesarista]

Got it, but the general recommendation is NOT to use alfresco database directly, and to use Alfresco API instead.

You can try with Alfresco API Explorer in 5.2, and check the corresponding shared-links related services in new REST-API.

Alfresco Content Services REST API Explorer 

http://localhost:8080/alfresco/api/-default-/public/alfresco/versions/1/shared-links 

Regards.

--C. 

[zh]

Dear Cesar,

I have another one idea.

What if I make a rule (as a temporary solution) and hang/attach this rule on any folder and sites. This rule will be activates each time when somebody 'Shared' their files. What do you think about this ?

Thanks Cesar!

Best regards,

Zh

[cesarista]

Hi:

And.. where are you going to save the information ? In the repository ? In an external DB ? How are you going to query or consume the data ?  Anyway, some messages ago I proposed you to create or modify a "Content behaviour", that it is indeed some kinda of generalization of a "Content rule". 

Behaviors/Policies | Alfresco Documentation 

Regards.

--C.

[zh]

Cesar,

I think it will be appropriate to send a email message about "Shared" events to special email address which will created for these notifications. 

I am sorry for misunderstanding the term "Content behavior". I never meet it before and Alfresco docs also do not contains this sentence/phrase.

Best regards,

Zh

[zh]

Hi Cesar,

can we hire you to do make rule to catch "Shared" events ?