You are here: Audited actions

Appendix B: Audited actions

When vault auditing is enabled and the audit log database correctly configured, the FDA Module logs vault activity to the specified table. The table has the structure shown in the following table.

Audit table structure
Field Name SQL Data Type

ID

int IDENTITY

Vault

nvarchar(255) NOT NULL

Context

nvarchar(255) NULL

LoginName

nvarchar(255) NOT NULL

UserFullName

nvarchar(255) NULL

Action

nvarchar(255) NOT NULL

ActionArg1

sql_variant NULL

ActionArg2

sql_variant NULL

ActionArg3

sql_variant NULL

ActionDate

datetime DEFAULT UTCNow

ObjectID

uniqueidentifier NULL

ObjectName

nvarchar(255) NULL

ObjectPath

nvarchar(255) NULL

ObjectRevision

nvarchar(255) NULL

Note    The values of Action for built-in FDA Module actions are predefined strings in English. Custom command action strings must be defined by the custom functions.

The vault contents actions that the FDA Module logs to the audit log database are listed in the following table. The values of the action arguments, for example, ActionArg1 depend on the action performed. Custom actions can also be logged as described in Auditing custom events.

Vault contents actions
Action ActionArg1 ActionArg2 ActionArg3

Document actions

Asset Management Module create reference Destination document ID (string) Reference type internal name (string) Reference ID (string)
Asset Management Module remove reference Destination document ID (string) Reference ID (string)  
CAD link create reference Destination document ID (string) Destination document name (string) Destination document path (string)
CAD link remove reference Destination document ID (string) Destination document name (string) Destination document path (string)
CAD link update properties from file      

CAD link update properties to file

Notes

  • This action is not logged when Application Integration is in Online mode because the property values can still be changed by the user or other software and those changes cannot be logged. Therefore, we recommend that the Invoke action be audited instead to detect potential document property changes.
  • For the MicroStation link in Remote mode, occurs twice for each update.
     
Change type New document type name (string)    

Change property

Note    Changes to memo type properties are only detected for the last 2000 characters.

<PropertySet>.<PropertyDef> New property value (first 255 characters) The text "<truncated>" if the property contains more than 2000 characters.
Change redlines      
Copy      
Copy to Clipboard      

Create

Note    Only supported for vaults that use Local Workspace, not the BlueCielo File System (AMFS).

Document type name (string) Source file or template (string)  
Create manual reference Destination document ID (string) Reference type internal name  
Cut to Clipboard      
Delete manual reference Reference ID (string) Destination document name (string)  
Derive      
NEW  Discussion comment added Comment text (string) Comment status (Open or Closed)  
NEW  Discussion comment edited Comment text (string) Comment status (Open or Closed) When a redline is added, Redline. When a file is attached, the file name.
NEW  Discussion comment closed   Comment status (Open or Closed)  
NEW  Discussion comment deleted   Comment status (Open or Closed)  

Drag-and-drop started

Note    This event is not supported by Web Access

     

Download document

Note    This event is supported only by Web Access

     
Global Collaboration Framework copy to briefcase Enlistment or Update Transfer Owner if ownership transferred, otherwise empty Destination share name (string)
Global Collaboration Framework import from briefcase Enlistment or Update Transfer Owner if ownership transferred, otherwise empty Source share name (string)
Import Document type name (string) Source file or template (string)  
Import briefcase Document type name (string) Source file (string)  
Invoke (open in registered application) Verb (application) name (string)    
Meridian Asset Management Module create reference Destination document ID (string) Reference type internal name (string) Reference ID (string)
Meridian Asset Management Module remove reference Destination document ID (string) Reference ID (string)  

Move

Note    This action is not possible in Web Access but copying and pasting from the Windows Clipboard is logged as a Create event.

     
Rendition copy to Clipboard      
Rendition started      
Rendition finished Succeeded or failed Watermark prior revision  
Rendition attached Source file path (string)    
Rendition published Succeeded or failed Watermark prior revision  

Replace

Note    Only supported for vaults that use Local Workspace, not the BlueCielo File System (AMFS).

     
Print      

Rename

Note    Only supported for vaults that use Local Workspace, not the BlueCielo File System (AMFS).

     
Replace content      
Scan Document type name (string) Scan file (string)  

Upload document

Note    This event is supported only by Web Access

     

Folder actions

Assign role Folder name (string) Folder ID (string) Folder path (string)
Change type New folder type name (string)    
Copy to Clipboard      
Create Folder type name (string)    
Delete      
Drag-and-drop started      
Move      
Remove role Folder name (string) Folder ID (string) Folder path (string)
Rename      

Working Copy/Quick Change actions

Add to to-do list To-do list name (string) Full user name (string)  
Begin draft revision      
Restore revision Restored revision number (string)    
Revoke draft revision Draft reassigned (Boolean)    
Submit draft revision Draft reassigned (Boolean)    

Document type workflow actions

Change manager New manager (string)    
Change state1 Current state (string) New state (string)  
Change to-do person New person (string)    
Revoke document      

Workflow definition actions

Assign to-do persons New persons (joined string)    
Assign managers New managers (joined string)    
Create new revision      
Run transition Transition name (string) Workflow name (string)  
Migrate State name (string) Workflow name (string)  
Reroute State name (string) Workflow name (string)  

Hybrid document actions

Attach part Attached document ID (string) Attached document path (string)  
Create part New part name (string)    
Delete part Part name (string)    
Detach part Detached document ID (string) Detached document path (string)  
Import part New part name (string) Source file(string)  

Work area actions

Add document      
Run transition Transition name (string)    
Release document Reassign (bit)    
Remove document Reassign (bit)    

Report actions

Report open      
Report open failed      

Project workflow actions

Assign Managers New managers (joined string)    
Run transition Transition name (string)    
Reroute State name (string)    

Project copy actions

Confirm Merged with Master      
Confirm Superseded by Master      
Copy to project      
Copy to project and lock      
Discard from project      
Link to Master Document      
Release as master      
Require Merge      
Transfer to project      

Undo Make Obsolete

     
Unlink from Master Document      

Security actions

Log on attempts Succeeded    

Electronic signature actions

Sign document PowerUser only2    

Note

  1. See the note in About auditing vault activity.
  2. The signing of documents from the Meridian Enterprise web client is not logged due to technical limitations. We recommend that audit logging of successful signing during workflow transitions from the web client be performed in VBScript on the DocWorkflowEvent_AfterChangeWFState event. The implementation should check the transition that is occurring (TargetState parameter) and the type of client being used (Client.Type = "HTML").

The vault configuration actions that the FDA Module logs to the audit log database are listed in the following table.

Vault configuration actions
Action Information
Commands Created, changed, or deleted
Configuration data Imported or exported

Document types

Created, changed, or deleted

Environment Changed
Event script Changed
Extensions Created, changed, or deleted
Field-Path definition Changed
Folder types Created, changed, or deleted
Lookup lists Created, changed, or deleted

Navigation views

Created, changed, or deleted

Opened in Configurator

Opened or opened read-only

Pages Created, changed, or deleted
Property definitions Created, changed, or deleted
Property sets Created, changed, or deleted
Reference types Created, changed, or deleted
Reports Created, changed, or deleted
Roles and privileges Changed
Scopes Created, changed, or deleted
Tables and queries Created, changed, or deleted
Work area templates Created, changed, or deleted

Workflow definitions

Created, changed, or deleted

The vault security actions that FDA Module logs to the audit log database are listed in the following table.

Vault security actions
Action

User log on

User assigned to role or removed from role

Related concepts

About auditing vault activity

Related tasks

Configuring the audit log connection

Creating an audit log database

Localizing the audit log database

Installing the audit log viewer

Auditing custom events


www.bluecieloecm.com