MedUX

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Auditing module ======
Dependencies: [[en:dev:modules:core]]

===== Description =====
Keeps a track of all database access actions (especially of the users').

This modules exposes an API for other modules to explicitly keep an
audit trail of database access and other actions. It hooks transparently
into all of the client's database access requests and logs the following
data: user, timestamp, target (which object/column, etc), action (CRUD).

This access audit trail should be cryptographically signed if possible.
The logging must be done on the server side to prevent tampering from the client. A client side audit API IMHO is not necessary.

Have a look at [[http://publicdb.gnumed.de/~ncq/gnumed/schema/release/gnumed-entire_schema.html#audit.schema|Gnumed's audit database schema]] for a working possible solution.

==== User stories ====

===== Links =====
  * [[en:dev:modules:auditing:draft|Draft]]
  * [[en:dev:modules:auditing:spec|Specification]]
  * [[please-include-here-the-link-to-the-API|API]]

{{tag>module}}