[jboss-jira] [JBoss JIRA] Closed: (SECURITY-326) Make the web audit levels configurable via system property

[Anil Saldhana (JIRA)]

     [ https://jira.jboss.org/jira/browse/SECURITY-326?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Anil Saldhana closed SECURITY-326.
----------------------------------

    Resolution: Done


the flag is now in WebResource:

====================
/** System Property setting to configure the web audit 
    *  off = turn it off
    *  headers = audit the headers
    *  cookies = audit the cookie
    *  parameters = audit the parameters
    *  attributes = audit the attributes
    *  headers,cookies,parameters = audit the headers,cookie and parameters
    *  headers,cookies = audit the headers and cookies
    *  and so on 
    *  
    *  Note: If this flag is not set in the system property, then we get no
    *  audit data for the web request
    * */
   public static final String WEB_AUDIT_FLAG = "org.jboss.security.web.audit";
========================

> Make the web audit levels configurable via system property
> ----------------------------------------------------------
>
>                 Key: SECURITY-326
>                 URL: https://jira.jboss.org/jira/browse/SECURITY-326
>             Project: JBoss Security and Identity Management
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: JBossSX
>    Affects Versions: 2.0.2.SP1
>            Reporter: Anil Saldhana
>            Assignee: Anil Saldhana
>             Fix For: 2.0.2.SP2
>
>
> we need to provide  a system property  "org.jboss.security.web.audit.verbosity=request,cookie,header"

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira