weblogic.security.audit
Interface AuditProvider

public interface AuditProvider

Security audit service provider's interface. A class can implement this interface to log security-related events for auditing purposes. Several WebLogic Server components are instrumented to call methods in this interface when "interesting" events occur.

Classes that implement this interface must have a public no-arg constructor that throws no exceptions.

Methods in this interface follow a simple pattern:

• No value is returned.
• No exceptions should be thrown.
• The first parameter to each method is the name of the subsystem that is generating a particular audit event. This is an arbitrary string.
• The "middle" parameters are the most important. If a middle parameter is an Object type, it may be null. If it is an array of Objects, it may be null, or it may contain null elements.
• The last parameter to each method is the value returned by the method that generates the audit event.

All parameters to all methods are read-only. You can filter events based on their parameters and return values.

authenticateUser

void authenticateUser(String subsystem,
                      UserInfo info,
                      User result)

Deprecated. 

A request was made to authenticate a user.

Parameters:

subsystem - subsystem name

info - authentication parameters

result - return value (null if authentication failure)

checkPermission

void checkPermission(String subsystem,
                     Acl acl,
                     Principal principal,
                     Permission permission,
                     boolean result)

Deprecated. 

A request was made to check for a permission on an ACL.

Parameters:

subsystem - subsystem name

acl - ACL that was checked

principal - principal that was checked

permission - permission that was checked

result - return value (false if permission denied)