[MDL-68193] db_replace() doesn't emit any audit trail, should emit a Moodle event - Moodle Tracker

XML

Word

Printable

Details

Type: Improvement
Status: Closed
Priority: Minor
Resolution: Fixed
Affects Version/s: 3.5.11, 3.6.9, 3.7.5, 3.8.2
Fix Version/s: 3.7.6, 3.8.3
Component/s: Administration
Labels:

Affected Branches:
MOODLE_35_STABLE, MOODLE_36_STABLE, MOODLE_37_STABLE, MOODLE_38_STABLE
Fixed Branches:
MOODLE_37_STABLE, MOODLE_38_STABLE
Pull from Repository:
git://github.com/mdjnelson/moodle.git
Pull Master Branch:
~~MDL-68193~~_master
Pull Master Diff URL:
https://github.com/mdjnelson/moodle/compare/master...MDL-68193_master
Testing Instructions:
1. Ensure unit tests pass.

Description

An admin could either by mistake, or if compromised a malicious admin could do a replace on content across the entire database, or targeted at specific content, and there is no audit trail at all about who did what.

Attachments

Activity

People

Assignee:: Mark Nelson

Reporter:: Brendan Heywood

Peer reviewer:: Brendan Heywood

Integrator:: Eloy Lafuente (stronk7)

Tester:: CiBoT

Participants:: Brendan Heywood, CiBoT, Eloy Lafuente (stronk7), Mark Nelson, Sara Arjona (@sarjona), Tim Hunt

Component watchers:: David Woloszyn, Huong Nguyen, Jake Dallimore, Meirza, Michael Hawkins, Raquel Ortega, Safat Shahin, Stevani Andolo

Votes:: 1 Vote for this issue

Watchers:: 6 Start watching this issue

Dates

Created:: 18/Mar/20 6:12 AM

Updated:: 04/May/20 8:24 PM

Resolved:: 02/Apr/20 11:28 PM

Fix Release Date:: 11/May/20

Time Tracking

Estimated:

Not Specified

Remaining:

Logged:

16m