Datastore - Audit Log of the Project Owner

[Dzhovani Chemishanov]

Hi,
  One of the projects that I manage stores sensitive financial and
accounting information in datastore. The auditors require log of
everything done there. However, people with ownership rights can view
and manipulate the data directly through the web dashboard surpassing
any logs in the appengine code.
  As far as I found, Google's audit log logs only table operations and
not crud on individual records which is a problem. Is there a way to
record such actions?
Regards,
Dzhovani

--
-------- Disclaimer --------
This email and any files transmitted may
contain proprietary and confidential information of ICT Group N.V. or any
of its subsidiaries like Strypes (“ICT”) and is intended only for the (use
of the) named recipient(s) above. If you have received this message in
error or are not the intended or named recipient(s) of this message, please
immediately notify the sender by returning and deleting this email message
from your computer. Any views or opinions presented are solely those of its
author and do not necessarily represent those of Strypes or ICT. You are
hereby notified that unauthorized disclosure, use, dissemination,
forwarding, printing or copying of this e-mail and its attachments either
whole or partial of its contents is strictly prohibited. Strypes or ICT
cannot guarantee that email communications are secure and error-free and
does not accept any liability for damages resulting from the use of email.
The general terms and conditions of purchase respectively sale and delivery
of ICT are applicable to all transactions and undertakings resulting
therefrom.

[Julie (cloud platform support)]

So to clarify, you want a feature for audit logs to record the email addresses of users why they modify Datastore data? Can you post a screenshot of the Audit logs that do not currently contain this as it is not clear where you would like this implemented after removing all personal and sensitive information such as email address, keys, passwords, credit card information etc. 

[Dzhovani Chemishanov]

Hi,

  Here is a screenshot of the web dashboard editor:

https://console.cloud.google.com/datastore/

What we need is for crud operations performed there to be reflected in the audit log. I found this from april, but decided to double check:

https://groups.google.com/forum/#!topic/google-appengine/xrYAH2XU-KQ

Regards,

Dzhovani

On 9/14/2018 8:12 PM, 'Julie (cloud platform support)' via Google App Engine wrote:

So to clarify, you want a feature for audit logs to record the email addresses of users why they modify Datastore data? Can you post a screenshot of the Audit logs that do not currently contain this as it is not clear where you would like this implemented after removing all personal and sensitive information such as email address, keys, passwords, credit card information etc. 

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/3459b505-c0af-4547-9a94-27c35080884f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Julie (cloud platform support)]

The Datastore team is aware of this request and is currently looking into it. You can use this issue tracker[1] to track the progress of that feature request. Please note that feature requests are not guaranteed to fulfilled and there is no ETA on them. 

[1] https://issuetracker.google.com/115872913

[Dzhovani Chemishanov]

Hi,

  Thanks for the assistance. I really hope that the feature will be easy to implement because it is the only way our project can comply with the current accounting standards.

Regards,

Dzhovani

On 9/17/2018 7:32 PM, 'Julie (cloud platform support)' via Google App Engine wrote:

The Datastore team is aware of this request and is currently looking into it. You can use this issue tracker[1] to track the progress of that feature request. Please note that feature requests are not guaranteed to fulfilled and there is no ETA on them. 

[1] https://issuetracker.google.com/115872913

--
You received this message because you are subscribed to the Google Groups "Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-appengi...@googlegroups.com.
To post to this group, send email to google-a...@googlegroups.com.
Visit this group at https://groups.google.com/group/google-appengine.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/b9400f47-5c52-4b65-87bc-b3de40bf2442%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.