| Include Page | ||||
|---|---|---|---|---|
|
Grouper 2.0+ has point in time auditing. The feature is enabled automatically when upgrading. The general design is to keep separate tables for many of the regular Grouper database tables that contain start and end times associated with each row. This allows you to perform efficient queries to find out the state of the data at any point in time or range.
...
| Panel |
|---|
If you need just an audit log of high level user actions, you may want to know about User Auditing. |
With point in time auditing, you can do the following queries at a single time in the past or for a date range.
...
| Code Block |
|---|
select GPG.NAME, GPF.NAME, GPM.SUBJECT_ID
from
GROUPER_PIT_MEMBERSHIPS_ALL_V gpmav,
grouper_pit_fields gpf,
grouper_pit_groups gpg,
grouper_pit_members gpm
where
GPM.subject_source != 'g:gsa'
and GPMAV.MEMBER_ID = GPM.ID
and GPM.SUBJECT_ID not in ('10094590', '10037375', '10033223')
and GPG.NAME like 'penn:community:employee:org:TOPU%'
and gpg.name not like '%_rolluporg_systemOfRecordAndIncludes'
and gpg.name not like '%systemOfRecord'
and gpg.name not like '%_personorg'
and gpg.name not like '%_rolluporg'
and GPMAV.OWNER_GROUP_ID = GPG.ID
and GPMAV.FIELD_ID = GPF.ID
and (GPMAV.MEMBERSHIP_START_TIME is null or GPMAV.MEMBERSHIP_START_TIME < 1364270400000000)
and (gpmav.membership_end_time is null or gpmav.membership_end_time > 1364270400000000 )
;
|
Find attribute assignments for a certain provisioning target
| Code Block |
|---|
select gpadn_metadata.name, gpaav_metadata.value_string, gpaa_metadata.end_time
from grouper_pit_attribute_assign gpaa_marker, grouper_pit_attribute_assign gpaa_target, grouper_pit_attribute_assign gpaa_do_provision, grouper_pit_attribute_assign gpaa_metadata,
grouper_pit_attr_assn_value gpaav_target, grouper_pit_attr_assn_value gpaav_do_provision, grouper_pit_attr_assn_value gpaav_metadata,
grouper_pit_attr_def_name gpadn_marker, grouper_pit_attr_def_name gpadn_target, grouper_pit_attr_def_name gpadn_do_provision, grouper_pit_attr_def_name gpadn_metadata,
grouper_attribute_def_name gadn_marker, grouper_attribute_def_name gadn_target, grouper_attribute_def_name gadn_do_provision,
grouper_pit_groups gpg
where gpg.name = 'test:testGroup8' and gpaa_marker.owner_group_id = gpg.id
and gadn_marker.name = 'penn:etc:provisioning:provisioningMarker' and gpadn_marker.source_id = gadn_marker.id
and gpaa_marker.attribute_def_name_id = gpadn_marker.id
and gadn_target.name = 'penn:etc:provisioning:provisioningTarget' and gpadn_target.source_id = gadn_target.id
and gpaa_target.attribute_def_name_id = gpadn_target.id and gpaa_target.owner_attribute_assign_id = gpaa_marker.id
and gpaav_target.attribute_assign_id = gpaa_target.id and gpaav_target.value_string = 'myGoogleGroupsProvisioner'
and gadn_do_provision.name = 'penn:etc:provisioning:provisioningDoProvision' and gpadn_do_provision.source_id = gadn_do_provision.id
and gpaa_do_provision.attribute_def_name_id = gpadn_do_provision.id and gpaa_do_provision.owner_attribute_assign_id = gpaa_marker.id
and gpaav_do_provision.attribute_assign_id = gpaa_do_provision.id and gpaav_do_provision.value_string = 'true'
and gpaa_metadata.attribute_def_name_id = gpadn_metadata.id and gpaa_metadata.owner_attribute_assign_id = gpaa_marker.id
and gpaav_metadata.attribute_assign_id = gpaa_metadata.id |