Decision #212: What level of logging information should be available to whom - Infrastructure - DataONE Tasks

Decision #212

What level of logging information should be available to whom

Added by Bruce Wilson almost 15 years ago. Updated about 14 years ago.

Status:

Closed

Priority:

Normal

Assignee:

Bruce Wilson

Category:

d1_common_java

Target version:

CCI-0.3 Deployed

Start date:

Due date:

% Done:

100%

Milestone:

None

Sprint:

Description

Previous discussions have indicated that the owner of an object should be able to at least see the logs for access to that object. This is generally reasonable, but there are privacy issues that need to be addressed. What level of logging? Should the owner always be able to see, for example, the username/IP address of all read operations for that object, or simply the number of times it was accessed?

Given that the 0.3 implementation has no authentication, we cannot have authenticated log access, so owners in that sense can't have access to the log information for only their objects. And there are definitely privacy implications to having log file information publicly readable