User Activity table

[omaroudat]

Hi Mr. ricardo,

I have a Question please:

I managed to export the User Actions table with all the details, but I need to know the to have the current login role for the user who did the action

something like GetCurrentRole()

Appreciate your support

[riclolsen]

Hi Omar,

Sorry, I couldn't fully understand your question.
Users and roles are connected by the users.roles array of ObjectIds of the roles collection.
There is no information in the tables about the users currently logged in the system. When a user logs in the systems a JWT token is given to its browser. As long as this token is valid, requests from that user's browser are considered valid. So there is no session established, no concept of logged in users.
You may mean the roles a user had when doing a logged action. In this case there is no easy answer. User's roles can change and the roles themselves can also change. All those changes are recorded as user actions also when done via UI. You have to review those possible changes to find what the roles the user had and what were the roles' rights when the action was issued. Anyway, the action was permitted to the user, so I do not know if this is relevant.

[omaroudat]

Hi Ricardo,

Thank you for your answer.

What I mean, as per the attached screenshot below, the user action contains username, Action, Tag Name, etc.

some of the users may have different roles for example Omar have "Admin" Role and User "Role"
He did an action to Ack the Alarm, What I want to achieve is to capture the role that the system used for him to do this action

So I want to capture per each event what is the role used for this user to perform the action

[riclolsen]

I see.
The user has a set of roles.
Each role has a set of rights.
The rights of a user are defined by the most relaxed rights of its roles.
Each action is authorized or not depending on user's rights.
It is not registered the roles or rights a user had when the action is issued.

User's roles can change and the roles themselves can also change. All those changes are recorded as user actions also when done via UI. You have to review those possible changes to find what the roles the user had and what were the roles' rights when the action was issued.

You can change the code here (line 1031) near de end of this file

 src/server_realtime_auth/app/controllers/auth.controller.js

to record also the roles the user has

// enqueue use action for later insertion to mongodb
function registerUserAction (req, actionName) {
  let body = {}
  Object.assign(body, req.body)

  let ck = checkToken(req)
  if (ck !== false) {
    console.log(actionName + ' - ' + ck?.username)
    delete body['password']
    // register user action
    UserActionsQueue.enqueue({
      username: ck?.username,
      roles: ck?.roles,                 // add this line
      properties: body,
      action: actionName,
      timeTag: new Date()
    })
  } else {
    console.log(actionName + ' - ' + req.body?.username)
    delete body['password']
    // register user action
    UserActionsQueue.enqueue({
      username: req.body?.username,
      properties: body,
      action: actionName,
      timeTag: new Date()
    })
  }
}

[omaroudat]

Thank you dear for your reply.

I added the line to the auth.controller.js file.

but the results in MongoDB tables still the same even for the new actions as shown below:

Anything missing needs to be added ?

[riclolsen]

Try to restart the server_realtime_auth service.

[omaroudat]

I already tried that even I restarted the Server. But still the same results

The Collection is json_scada.userActions

[omaroudat]

Hi @riclolsen

I tried to restart the service multiple times and I restarted the server as well but with no luck.

Appreciate if you can help

[riclolsen]

Sorry, this is really not enough.
Replace 2 files attached here.
C:\json-scada\src\server_realtime_auth\app\controllers\auth.controller.js
C:\json-scada\src\server_realtime_auth\index.js
Rename the files to javascript extension ".js" .
Restart the server_realtime_auth service.
Logout and login the user to recreate JWT tokens.
Then it should work.

index.js.txt
auth.controller.js.txt
.