irods audit plugin capturing msi calls

[Maryam Soleimani]

Hi all,

I’m testing the iRODS Audit Plugin on Yoda. Yoda uses MSI calls, and I’m trying to capture the corresponding events from the PEPs that should be triggered. However, I’ve noticed that some of the expected PEPs are not firing.

I came across a related issue regarding MSIs not triggering PEPs:
https://github.com/irods/irods/issues/7387

In my setup (iRODS 4.3.4), Yoda calls msiDataObjRename during a rename operation. I can see that the database-level PEP pep_database_rename_object_post is triggered, but pep_api_data_obj_rename_post is not.

This is not the only issue I have faced; pep_api_data_obj_unlink_post which should be triggered after a file deletion is also missing . (msiDataObjUnlink)

 

If MSI calls inherently don’t trigger the corresponding pep_api_* events, the Audit Plugin will not be able to provide complete coverage of iRODS operations. I’d really appreciate your help on whether this behavior is expected or if there’s a recommended workaround.

 

Best regards,
Maryam Soleimani

[Alan King]

Hi Maryam,

This is the expected behavior. Some resource and database PEPs can be used in lieu of the API PEPs in these cases, but it is indeed not a complete replacement.

Some legacy static PEPs could work, but these are unreliable and are under consideration for possible removal or replacement in the future.

We are always open to hearing ideas!

Alan

--
--
The Integrated Rule-Oriented Data System (iRODS) - https://irods.org
 
iROD-Chat: http://groups.google.com/group/iROD-Chat
---
You received this message because you are subscribed to the Google Groups "iRODS-Chat" group.
To unsubscribe from this group and stop receiving emails from it, send an email to irod-chat+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/irod-chat/55a4766b-b4d6-4c0a-bcbc-3974fc72ebd4n%40googlegroups.com.

--

Alan King

Senior Software Developer | iRODS Consortium

[Terrell Russell]

One additional point...

If you're writing the MSI's yourself, you can add logging within them?

Terrell

To view this discussion visit https://groups.google.com/d/msgid/irod-chat/CADnp3x4_dwkTUvN_2u7JhZA7gWjjZhRAtq4H9s1P13preJLakw%40mail.gmail.com.