Wonder if impersonated events shouldn't be normal events, but just have
some prefix for them in type? For example IMPERSONATED_LOGIN,
IMPERSONATED_LOGOUT, IMPERSONATED_TOKEN_REFRESH etc. Similarly like we
have prefix in type for error events.
And in all impersonated events, there might be also detail in the event
identifying admin user who is impersonating.
Hopefully this is easy to implement without touching too much files in
codebase (but not sure) :)
Marek
On 13/01/16 21:51, Bill Burke wrote:
IMO, impersonate events should not be treated as a success (debug)
event
and should be logged to the console/log file. Agreed?