Uploaded image for project: 'Dev - Nexus Repo'
  1. Dev - Nexus Repo
  2. NEXUS-10896

record and expose the authenticated user who uploaded a component to a hosted repository

Details

    Description

      The authenticated userid and IP address of the client which uploaded a component to the hosted repository is valuable auditing information.

      Use Case:

      • regression from Nexus 2 if omitted - Nexus 2 stored and exposed this information on the artifact details tab
      • As a user, it is valuable for me to know who uploaded an asset.
      • As a customer, I hope fields in NX2 remain in NX3 unless intentionally removed due to refactoring or lack of use.

      Acceptance Criteria:

      • record the authenticated username that added a component to a hosted repository using any method
      • record the client IP address/host name ( do not attempt to DNS resolve it ) as interpreted from the upload request
      • show "Uploaded By" details in the asset section of the UI in NX3

      Considerations:

      • make it configurable to display this info in the UI? Would some customers find exposing the userid / ip address sensitive information?

      Questions

      • What do we do about migration? If we pull this over, do we potentially run into weirdness with different user domains?

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              plynch Peter Lynch
              Klaus Wening Klaus Wening
              Votes:
              7 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                tigCommentSecurity.panel-title