Auditing user management

<< Click to Display Table of Contents >>

Navigation:  »No topics above this level«

Auditing user management

mapp Services V5.16

Events for these components can be recorded using MpAudit. For more information about how to create an entry, see section Defining the event text.

The identification number can be incorporated in the respective entry using the token %act.

The following events can occur for these mapp components:

This section lists the different user events:

User management event

This event type allows user management events such as deleting/adding a user to be recorded.

Event ID

2

Components

MpUser components | MpUserX components

Events

op

Name of the user who was logged in when the event occurred

ev

Event ID

idx

Returns the index of the currently generated event. The value is incremented on each new event. The first generated event in the event list thus has value 1; the 50th event has index 50 and the 100th has index 100.

map

Name of the mapp component to which the event is assigned via MpLink

usr

User who is affected by the event (e.g. user who was deleted)

act

Action that was executed in a mapp component. The ID for the action is returned (e.g. 10 for "Invalid username entered").

For additional information, see the following table:

Event

Identification number (returned via %act)

Additional information

Unknown action

0

 

A user was logged in.

1

{&op}/[%op] - User

A user was logged out.

2

{&op}/[%op] - User

A user was logged out automatically.

3

{&op}/[%op] - User

A user has been added.

4

{&op}/[%op] - The user that performed the operation

{&usr}/[%usr] - The user that was added

The user was deleted.

5

{&op}/[%op] - The user that performed the operation

{&usr}/[%usr] - The user that was deleted

The user was locked.

6

{&op}/[%op] - The user that performed the operation

{&usr}/[%usr] - The user that was blocked

The user was unblocked.

7

{&op}/[%op] - The user that performed the operation

{&usr}/[%usr] - The user that was unblocked

The user was blocked for entering an incorrect password too many times.

8

{&op}/[%op] - The user that performed the operation

{&usr}/[%usr] - The user that was blocked

The user changed the password.

9

{&op}/[%op] - User

An invalid username was entered.

10

 

An invalid password was entered.

11

 

Role added

12

{&op}/[%op] - The user that performed the operation

{&usr}/[%usr] - Which role has been added

Role deleted

13

{&op}/[%op] - The user that performed the operation

{&usr}/[%usr] - Which role has been deleted

Invalid credentials entered

14

 

Table: User management event

For information about how to specify the event text, see section Using the new format.

Example of the new format:

"{&op} - Action: User {&usr} was deleted" evaluated: "Admin - Action: User Mike was deleted", which means that user Admin deleted user Mike.

Example of the old format:

"[%op] - Action: User [%usr] was deleted" evaluated: "Admin - Action: User Mike was deleted", which means that user Admin deleted user Mike.

Electronic signature event

This event type allows events involving the electronic signature to be recorded.

Event ID

3

Components

MpUserSignature | MpUserSignatureUI

MpUserXSignature | MpUserXSignatureUI

Events

cmt

Comment specified by the user for the signature

id

Name of the mapp component to which the event is assigned via MpLink

idx

Returns the index of the currently generated event. The value is incremented on each new event. The first generated event in the event list thus has value 1; the 50th event has index 50 and the 100th has index 100.

err

User management error number (can be used to display whether the username or password was incorrect, for example)

act

Returns the action ID that must be specified in the configuration for a signature

type

Action that was executed in a mapp component. The ID for the action is returned (e.g. 2 for "Electronic signature canceled").

For additional information, see the following table:

Event

Identification number (returned via "typ")

Event as text (returned via "typt")

Electronic signature performed successfully

0

OK

Electronic signature exited due to incorrect input (username or password)

1

FAIL

Electronic signature canceled by user

2

ABORT

Electronic signature exited due to exceeded limit for incorrect input (see configuration of user management)

3

FATAL

Table: Electronic signature event

For information about how to specify the event text, see section Using the new format.

Example of the new format:

"Signature ID {&act}: {&typ} ({&typt})" evaluated: "Signature ID 3: Electronic signature was successfully executed (OK)", which means that the signature was successfully executed with ID 3.

Example of the old format:

"Signature ID [%act] : [%typ] ([%typt]" evaluated: "Signature ID 3: Electronic signature was successfully executed (OK)", which means that the signature was successfully executed with ID 3.