com.sap.cloud.sdk.cloudplatform.auditlog

Class ScpCfAuditLog

java.lang.Object

com.sap.cloud.sdk.cloudplatform.auditlog.ScpCfAuditLog

All Implemented Interfaces:

AuditLog

public class ScpCfAuditLog
extends Object
implements AuditLog

Implementation of audit logging that uses the Cloud Foundry (HANA XS) library. The cloudplatform library is very limited, so audit data is filled in on a best effort basis.

Important: For performance reasons, use only for logging of events as required by the relevant security standards:

• SEC-215 "SAP software shall be able to log security relevant events."
• SEC-254 "SAP software shall log read access to sensitive personal data."
• SEC-257 "SAP software shall be able to log changes to configuration data."
• SEC-265 "SAP software shall log changes to personal data."
  Future enhancements:
  • Use class name of caller provided by factory
  • Fill in tenant information

Field Summary

Fields

Modifier and Type	Field and Description
static String	AUDIT_LOG_JNDI_NAME

Constructor Summary

Constructors

Constructor and Description
ScpCfAuditLog()

Method Summary

Modifier and Type	Method and Description
void	logConfigChange(AccessRequester initiator, String objectId, String objectName, Iterable<AccessedAttribute> attributesAffected, String message, Throwable error)
void	logConfigChangeBeginning(AccessRequester initiator, String objectId, String objectName, Iterable<AccessedAttribute> attributesAffected, String message)
void	logDataRead(AccessRequester initiator, String objectId, String objectName, Iterable<AccessedAttribute> attributesAffected, String message, Throwable error)
void	logDataReadAttempt(AccessRequester initiator, String objectId, String objectName, Iterable<AccessedAttribute> attributesAffected, String message)
void	logDataWrite(AccessRequester initiator, String objectId, String objectName, Iterable<AccessedAttribute> attributesAffected, String message, Throwable error)
void	logDataWriteAttempt(AccessRequester initiator, String objectId, String objectName, Iterable<AccessedAttribute> attributesAffected, String message)
void	logSecurityEvent(AccessRequester initiator, String message, Throwable throwable)
void	logSecurityEventBeginning(AccessRequester initiator, String message)

Methods inherited from class java.lang.Object

equals, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

AUDIT_LOG_JNDI_NAME

public static final String AUDIT_LOG_JNDI_NAME

See Also:

Constant Field Values

Constructor Detail

ScpCfAuditLog

public ScpCfAuditLog()

Method Detail

logSecurityEventBeginning

public void logSecurityEventBeginning(AccessRequester initiator,
                                      String message)

Specified by:

logSecurityEventBeginning in interface AuditLog

logSecurityEvent

public void logSecurityEvent(AccessRequester initiator,
                             String message,
                             @Nullable
                             Throwable throwable)

Specified by:

logSecurityEvent in interface AuditLog

logConfigChangeBeginning

public void logConfigChangeBeginning(AccessRequester initiator,
                                     String objectId,
                                     @Nullable
                                     String objectName,
                                     @Nullable
                                     Iterable<AccessedAttribute> attributesAffected,
                                     @Nullable
                                     String message)

Specified by:

logConfigChangeBeginning in interface AuditLog

logConfigChange

public void logConfigChange(AccessRequester initiator,
                            String objectId,
                            @Nullable
                            String objectName,
                            @Nullable
                            Iterable<AccessedAttribute> attributesAffected,
                            @Nullable
                            String message,
                            @Nullable
                            Throwable error)

Specified by:

logConfigChange in interface AuditLog

logDataReadAttempt

public void logDataReadAttempt(AccessRequester initiator,
                               String objectId,
                               @Nullable
                               String objectName,
                               @Nullable
                               Iterable<AccessedAttribute> attributesAffected,
                               @Nullable
                               String message)

Specified by:

logDataReadAttempt in interface AuditLog

logDataRead

public void logDataRead(AccessRequester initiator,
                        String objectId,
                        @Nullable
                        String objectName,
                        @Nullable
                        Iterable<AccessedAttribute> attributesAffected,
                        @Nullable
                        String message,
                        @Nullable
                        Throwable error)

Specified by:

logDataRead in interface AuditLog

logDataWriteAttempt

public void logDataWriteAttempt(AccessRequester initiator,
                                String objectId,
                                @Nullable
                                String objectName,
                                @Nullable
                                Iterable<AccessedAttribute> attributesAffected,
                                @Nullable
                                String message)

Specified by:

logDataWriteAttempt in interface AuditLog

logDataWrite

public void logDataWrite(AccessRequester initiator,
                         String objectId,
                         @Nullable
                         String objectName,
                         @Nullable
                         Iterable<AccessedAttribute> attributesAffected,
                         @Nullable
                         String message,
                         @Nullable
                         Throwable error)

Specified by:

logDataWrite in interface AuditLog