1-888-365-2779
+1-888-365-2779
Try Now
More in this section

Forums / Developing with Sitefinity / Content Change Logging/Audit Trail

Content Change Logging/Audit Trail

4 posts, 0 answered
  1. Christopher
    Christopher avatar
    6 posts
    Registered:
    15 May 2009
    17 May 2011
    Link to this post
         We know from reading the documentation that Sitefinity will log errors but what about "normal" activities? The CMS is out on a public facing server and like any other website is open to attack attempts. If someone should compromise the administrator login or any login with the ability to alter content through normal CMS channels they could inject malicious Javascript or HTML. However if we are logging all such content changes to a log file, the windows event logs, or some other kind of log we can configure our monitoring software to pick up on changes and compare them to a list of authorized changes (through an internal change request system) and then alert if a change is made to the content of the website outside of authorized means. So does Sitefinity offer the ability to record normal content changes to some kind of log? If it doesn't natively, can someone direct us to functions that exist in the API that we could use for such a purpose?
          Alternate solution, what about adding our own triggers to the SQL tables that govern content? We could write such changes to a custom table and then produce a "log" from that. What we are really looking for is an audit trail/log for changes to the content within the CMS.

    We are open to input and suggestions.
  2. Georgi
    Georgi avatar
    3583 posts
    Registered:
    28 Oct 2016
    23 May 2011
    Link to this post
    Hi Christopher,

    Thank you for your question.

    We do not yet log extra activity for audit trailing. This can be implemented though in numerous ways. I'd suggest you the following though:

    Every content item can be created/removed/updated/deleted via it's content manager class. Every content manager class has Executing and Executed events. You can subscribe for these events on application start for example (in global.asax file) and store all information they provide in separate tables. When there is an operation on a content item, both methods provide command argument showing the content item ID and the operation that has been performed on it.

    Adding SQL triggers would be complex I think due to the number of relations that we maintain.

    Let me know if you need any additional information, or if you hit a roadblock.

    Greetings,
    Georgi
    the Telerik team
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
  3. freddy
    freddy avatar
    2 posts
    Registered:
    13 Apr 2011
    12 Jun 2011
    Link to this post
    Could you please put an example for the code , i want to make Audit trial module , so please help me with the functions i should override 

    Thanks
    Freddy Khalaf
  4. Georgi
    Georgi avatar
    3583 posts
    Registered:
    28 Oct 2016
    16 Jun 2011
    Link to this post
    Hello Freddy,

    Please check the following forum thread - http://www.sitefinity.com/devnet/forums/sitefinity-3-x/general-discussions/email-notifications-upon-changes.aspx

    The approach is absolutely the same, although this example is for the 3.x version.

    There is one more approach - custom workflows. Our content workflows can be customized - you can have certain actions defined for each step. These actions can log information wherever you'd like on steps defined by you.

    Kind regards,
    Georgi
    the Telerik team
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
4 posts, 0 answered