[AuditPrivacySettings]
Available since Exponential 6.0.15 (in development, not in a release yet).
Summary
The group [AuditPrivacySettings] of settings/audit.ini.
File
settings/audit.ini; override it in settings/override/audit.ini.append.php, in a siteaccess or in an extension.
Settings
| Setting | Default | Description |
|---|---|---|
| Field[<key>] | actor.login=full; actor.ip=truncate; actor.ua=truncate; actor.session=hash; actor.cli.os_user=full; request.url=truncate; request.host=full; object.name=full; email=hash; attempted_login=hash | Per field: full | truncate | hash | off (see "The record format" for what truncate means per field). Q3: a safe default; the session can only be hashed or off. |
| IPv4Prefix | 24 | Prefix lengths for truncate of addresses: /24 for IPv4, /48 for IPv6 (Q3). |
| IPv6Prefix | 48 | |
| SecretPathViews[] | user/activate; user/forgotpassword; userpaex/forgotpassword | Views whose path parameters are tokens: their parameters are never recorded. |
| NeverRecord[] | HashKey; Hash; Password; PasswordConfirm; password_hash; ezxform_token | Attribute and parameter names never recorded, besides everything expIniEditor::isSecret() recognises. |
| PseudonymiseAfterDays | 90 | Days after which the index replaces personal fields by their hashed form (Q3, F6). |
See also
Generated example: audit.ini [AuditPrivacySettings]
Added to the reference for Exponential 6.0.15: the 4.x reference had no page for this group. The descriptions are the comment lines of settings/audit.ini.
Contributors
- Graham Brookins Updated
Comments
Add a comment