Pierre Smits created OFBIZ-12391:
------------------------------------

             Summary: Trustworthy OFBiz - audit capabilities
                 Key: OFBIZ-12391
                 URL: https://issues.apache.org/jira/browse/OFBIZ-12391
             Project: OFBiz
          Issue Type: Improvement
          Components: framework/entity
    Affects Versions: Trunk
            Reporter: Pierre Smits
            Assignee: Pierre Smits


When potential adopters want to use OFBiz as their primary solution for 
business critical ERP (and related) processes, they (or at least their 
auditors) want to be sure that they can see:
 # who created the record in the underlying rdbms,
 # when that record was created,
 # who was the last one to modify the record
 # when the modification happened.

Currently out of the 800+ entities defined in the various entity model files, 
only a fraction of the entities have fields defined for
 * createdDate (38)
 * createdByUserLogin (64)
 * lastModifiedDate (32)
 * lastModifiedByUserLogin (32)

which means that for crucial entities (for a business) in OFBiz entities 
records can be created and changed (for nefarious reasons) without auditors and 
other investigators being able to state anything regarding the above 4 points.

 

 



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to