Using TDV Log Files to Track Resource Privilege Changes
Occasionally it can be helpful to be able to determine when, if, and how privileges have been changed for a given Studio resource. This information is tracked in the cs_server_metadata.log file. By default, this feature is not enabled because it can cause the log file to grow very large, very fast. You must enable privilege logging using Studio configuration parameters before this information will be captured in the log files.
To track resource privilege changes
1. Log into Studio as the admin user.
2. From the Administration menu, choose Configuration.
3. Navigate to Server > Configuration > Security.
4. Set the value of Enable Privilege Logging to True.
5. Click Apply.
6. Click OK.
7. Restart the TDV Server to implement your changes.
8. Wait for TDV Studio resources to undergo privilege changes.
9. Using your preferred file management tool, navigate to:
<TDV_install_dir>/logs
10. Open the cs_server_metadata.log file.
11. Locate and review the data in PRIVILEGE sections of the text file.
For example:
UPDATED DATA_SOURCE /shared/security/ReqSignEncRepSignEnc (17663)
PRIVILEGE composite/all (2) READ WRITE EXECUTE SELECT UPDATE INSERT DELETE GRANT
PRIVILEGE dynamic/all (3) READ WRITE EXECUTE SELECT UPDATE INSERT DELETE GRANT
2013-06-26 11:51:46.006 composite/admin (-1973) saved following changes:
802 804
UPDATED DATA_SOURCE /shared/examples/ds_orders (10390)
PRIVILEGE composite/all (2) READ EXECUTE SELECT