Admin Audit API issues

[StuartK]

In testing the behavior of the API we've noticed a couple of anomolies which we can reproduce.  Wondered if anyone else had seen them?

1) The event - Group Settings - Remove user from Group does not seem to be captured.  Add user to group is captured.

2) The event Change Sites Settings SHARING_OUTSIDE_DOMAIN does not return a value when the API request is made to return results of that type, however the event is being recorded since it is returned when querying the API for all events by person or by time.  

I know its an API in Labs at the moment, so maybe not surprising there are small issues in there.  

Important for any kind of an Audit report to be complete so stuff missing will cause concerns.

Stu

[StuartK]

Think I found number 3

It appears that adding a calendar resource via the Calendar Resource API over 3 legged OAuth is not reported whereas adding a calendar resource via cPanel is.

[Claudio Cherubino]

Hi Stuart,

The Calendar Resource API supports 3-legged OAuth:

http://code.google.com/googleapps/domain/calendar_resource/docs/1.0/calendar_resource_developers_guide_protocol.html#3LO_Tokens

Are you getting any specific error message?

Claudio

On Fri, Jun 24, 2011 at 5:40 PM, StuartK <stuart...@appogee.co.uk> wrote:

Think I found number 3

It appears that adding a calendar resource via the Calendar Resource API over 3 legged OAuth is not reported whereas adding a calendar resource via cPanel is.

--
You received this message because you are subscribed to the Google Groups "Google Apps Domain Information and Management APIs" group.

To view this discussion on the web visit https://groups.google.com/d/msg/google-apps-mgmt-apis/-/MOBPEuJOasAJ.

To post to this group, send email to google-app...@googlegroups.com.
To unsubscribe from this group, send email to google-apps-mgmt...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/google-apps-mgmt-apis?hl=en.

[StuartK]

Hi Claudio

We have successfully used 3 legged OAuth with the Calendar Resources
API for some time, and the action we take does succeed as can be
verified via the cPanel.
However that action is not being recorded by the Admin Audit API.
No errors are thrown, you just don't see the action reported in the
same was as any other API action is.

Stuart

On Jun 24, 6:08 pm, Claudio Cherubino <ccherub...@google.com> wrote:
> Hi Stuart,
>
> The Calendar Resource API supports 3-legged OAuth:
>

> http://code.google.com/googleapps/domain/calendar_resource/docs/1.0/c...

>
> Are you getting any specific error message?
>
> Claudio
>

[Claudio Cherubino]

Stuart,

I'm still checking with the engineers about the issue you reported.

Please bear with me a bit more.

Thanks

Claudio

[Claudio Cherubino]

Hi,

We eventually found a bug on our side that was preventing calls made by the Calendar Resource API to be recorded properly.

Thanks for bringing this to our attention.

Claudio

[StuartK]

Hi Claudio

the api is being called using URLs with the following constructs -
note I have not shared the key information etc in the forum for
security reasons:

This call FAILS and the event is not returned even when querying for
all events
https://www.googleapis.com/apps/reporting/audit/v1/ID1/ID2?key=KEY&eventName=REMOVE_GROUP_MEMBER&maxResults=n

This call WORKS which demonstrates the construct we are using is
valid.
https://www.googleapis.com/apps/reporting/audit/v1/ID1/ID2?key=KEY&eventName=ADD_GROUP_MEMBER&maxResults=n

Similarly this call FAILS after the event is actioned on the cPanel
and no event is returned when querying for all events.
https://www.googleapis.com/apps/reporting/audit/v1/ID1/ID2?key=KEY&eventName=CHANGE_SITES_SETTINGS&maxResults=n

HTH

On Jun 28, 5:37 pm, Claudio Cherubino <ccherub...@google.com> wrote:
> Stuart,
>
> I'm still checking with the engineers about the issue you reported.
> Please bear with me a bit more.
> Thanks
>
> Claudio
>

[Claudio Cherubino]

Stuart,

Can you please add the sensitive details in a private email to me?

Thanks

Claudio

[StuartK]

Just to confirm that this information has been supplied.
Stuart

On Jun 29, 3:01 pm, Claudio Cherubino <ccherub...@google.com> wrote:
> Stuart,
>

> Can you please add the sensitive details in a private email to me?
> Thanks
>
> Claudio
>

> On Wed, Jun 29, 2011 at 2:53 PM, StuartK <stuart.kee...@appogee.co.uk>wrote:
>
>
>
>
>
>
>
> > Hi Claudio
>
> > the api is being called using URLs with the following constructs -
> > note I have not shared the key information etc in the forum for
> > security reasons:
>
> > This call FAILS and the event is not returned even when querying for
> > all events
>

> >https://www.googleapis.com/apps/reporting/audit/v1/ID1/ID2?key=KEY&ev...

>
> > This call WORKS which demonstrates the construct we are using is
> > valid.
>

> >https://www.googleapis.com/apps/reporting/audit/v1/ID1/ID2?key=KEY&ev...

>
> > Similarly this call FAILS after the event is actioned on the cPanel
> > and no event is returned when querying for all events.
>

> >https://www.googleapis.com/apps/reporting/audit/v1/ID1/ID2?key=KEY&ev...