Who deleted my file

[Maryam Soleimani]

Hello all

 

I am investigating the ICAT db to figure out where I can get the information on who has deleted a file. This is part of the attempt to capture auditing information by investigating the changes in the DB. I am using Debezium to stream changes in DB into kafka and later extracting the relevant information from the captured kafka topics. I can see who has iput the file by looking into r_data_main and r_obj_access tables, but I see no changes that logs the information on who has deleted a file in tables that I was investigating. I appreciate if you provide tips on extracting this information in the ICAT db.

Best regards

Maryam Soleimani

[Terrell Russell]

Hi Maryam,

The iRODS catalog holds no information about what used to be true or things that have happened.  We assume that logging is handled outside of the database in some other system.

You would need to capture the deletion of a data object (and who did that) at the time of the deletion.  That could be done with a pre/post-PEP that logs that action somewhere or the audit plugin could be used to see those events.

I hope that answers your question.

Terrell

--
--
The Integrated Rule-Oriented Data System (iRODS) - https://irods.org
 
iROD-Chat: http://groups.google.com/group/iROD-Chat
---
You received this message because you are subscribed to the Google Groups "iRODS-Chat" group.
To unsubscribe from this group and stop receiving emails from it, send an email to irod-chat+...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/irod-chat/PAVP191MB2313B8CD381B1B9EA95086FFF000A%40PAVP191MB2313.EURP191.PROD.OUTLOOK.COM.