Log permissions

0 vote

avatar

Hello,

our ISMS and Compliance guys have to have an access to logs in DVLS/RDM. Currently, there is a limitation in the system that they also have to receive view rights on the entries to be able to see the log entries.
Since users are users and they also tend to save sensitive information under description, this poses a security risk.

Would it please be possible to implement additional permission, which would allow to see logs of the entries, but not the entries themselves?

Thank you

All Comments (2)

avatar

Hello,

Thank you for your feature request. I assume here that you are talking about the Activity Logs report, am I correct ? I reproduced what you said, a user looking that report will only see entries that he has access to view. I think it would make sense to show all connections in that report (whatever you have view access or not) since you probably gave the System Permission to the user to be able to see that report. Would it work for you ? If it makes sense, we could improve that without any additional permission.

Best regards,

François Dubois

avatar

You assume correct, Activity Logs.
Correct, our ISMS has separate System Permissions, but should see the entries in Activity Log, no matter the read-permission.
Looking forward to this implementation.