[cvsnt] CVSNT Auditing....

[Tony Hoyle]

Bo Berglund wrote:
> 1. Relations missing
> --------------------
> The Sessionlog table is supposed to record all activity in the server
> and it has a primary key on the column 'Id'.
> The other tables have a 'SessionID' column that stores the Sessionlog.Id
> value
> In normal cases the SessionId should have a foreign key set to
> Sessionlog.Id, but there is no relation at all here!
> Is this by design or an oversight?

Some databases don't handle them so I've never bothered adding them
(since the sql creation scripts are all derived from each other).

> 2. Access logging missing
> -------------------------
> I noted that cvs update is recorded in the Sessionlog table as expected,
> but there is no indication at all on *what* was updated, so the auditing
> can therefore not record when people are retrieving data from the
> server.

There's data in HistoryLog for that I think.  audit only has access to
the data given it by the API and that has limits.

Tony