The administration model

This model defines users, roles and permissions for UnityBase.

SIEM integration notice

Under Linux in case service is started by systemd all security-related changes are logged into syslog/journald (in addition to uba_audit table) with PRIORITY=Notice

Each message is in format AUDIT={json with parameters}, example:

AUDIT={"entity":"uba_userrole","actionType":"DELETE","actionUser":"admin","remoteIP":"127.0.0.1","targetUser":"admin2","targetRole":"DataManager","entityinfo_id":337856398524417}

Possible meaning of actionType:

  • INSERT - Adding
  • UPDATE - Modifying, new attributes are in toValue
  • DELETE - Removing
  • LOGIN - User is logged into, HTTP request headers is in toValue attribute
  • LOGIN_FAILED - User fails to log-in
  • LOGIN_LOCKED - Locked user login attempt failed
  • SECURITY_VIOLATION - Security violation, details in toValue attribute
  • DOWNLOAD - File downloaded` (DE edition only
  • PRINT - File printed` (DE edition only

Possible entity values

  • uba_role: roles
  • uba_grouprole: roles for groups
  • uba_els: entity-level security rules
  • uba_user: users
  • uba_usergroup: user groups membership
  • uba_userrole: user roles membership
  • org_employee: assignment of user to employee

Examples:

  • actionType==='INSERT' and entity=='uba_user' mean what new user is added
  • actionType==='DELETE' and entity=='uba_usergroup' mean what user removed from group

Other fields meaning:

  • actionUser: user who do an action
  • targetUser: user for whom action is done
  • remoteIP: IP address of caller
  • targetRole: a role
  • targetGroup: a group
  • userAgent: for LOGIN* events - an HTTP user-agent
  • fromValue: addition information

Classes

Types

# ubaAdvSecurityAttrs inner

Properties

# ubaAlsAttrs inner

Properties

# ubaAuditAttrs inner

Properties

# ubaAuditTrailAttrs inner

Properties

# ubaElsAttrs inner

Properties

# ubaElsPermissionAttrs inner

Properties

# ubaGroupAttrs inner

Properties

# ubaGrouproleAttrs inner

Properties

# ubaOtpAttrs inner

Properties

# ubaPrevPasswordsHashAttrs inner

Properties

# ubaRoleAttrs inner

Properties

# ubaSessionAttrs inner

Properties

# ubaSubjectAttrs inner

Properties

# ubaUserAttrs inner

Properties

# ubaUsercertificateAttrs inner

Properties

# ubaUsergroupAttrs inner

Properties

# ubaUserroleAttrs inner

Properties