Details
-
New Feature
-
Status: Open (View Workflow)
-
Major
-
Resolution: Unresolved
Description
SecurityListener should be notified when an ACL check is denied. If it can be done efficiently, it should also be notified when an ACL check is granted. This would allow a listener to determine which permissions are being used by whom on what.
Attachments
Issue Links
- depends on
-
JENKINS-20999 Extension point for tracking login-related events
-
- Resolved
-
Activity
Field | Original Value | New Value |
---|---|---|
Link |
This issue is related to |
Link |
This issue depends on |
Link |
This issue is related to |
Labels | logging security | api logging security |
Workflow | JNJira [ 153266 ] | JNJira + In-Review [ 178474 ] |
I.e., logging when a AccessDeniedException is thrown (mainly from ACL.checkPermission), and/or caught at top level (ExceptionTranslationFilter.handleException).