Method handleGetDbAuditConfig

rest/admin_api.go:848–926

GET audit config for database

()

// GET audit config for database
func (h *handler) handleGetDbAuditConfig() error {
	h.assertAdminOnly()

	showOnlyFilterable := h.getBoolQuery("filterable")
	verbose := h.getBoolQuery("verbose")

	var (
		etagVersion          string
		dbAuditEnabled       bool
		dbAuditDisabledUsers []base.AuditLoggingPrincipal
		dbAuditDisabledRoles []base.AuditLoggingPrincipal
		enabledEvents        = make(map[base.AuditID]struct{})
	)

	if h.server.BootstrapContext.Connection != nil {
		found, dbConfig, err := h.server.fetchDatabase(h.ctx(), h.db.Name)
		if err != nil {
			return err
		}

		if !found {
			return base.HTTPErrorf(http.StatusNotFound, "database config not found")
		}

		etagVersion = dbConfig.Version

		runtimeConfig, err := MergeDatabaseConfigWithDefaults(h.server.Config, &dbConfig.DbConfig)
		if err != nil {
			return err
		}

		// grab runtime version of config, so that we can see what events would be enabled
		if runtimeConfig.Logging != nil && runtimeConfig.Logging.Audit != nil {
			dbAuditEnabled = base.ValDefault(runtimeConfig.Logging.Audit.Enabled, false)
			if runtimeConfig.Logging.Audit.EnabledEvents != nil {
				for _, event := range *runtimeConfig.Logging.Audit.EnabledEvents {
					enabledEvents[base.AuditID(event)] = struct{}{}
				}
			}
			dbAuditDisabledUsers = runtimeConfig.Logging.Audit.DisabledUsers
			dbAuditDisabledRoles = runtimeConfig.Logging.Audit.DisabledRoles
		}
	} else {
		return base.HTTPErrorf(http.StatusServiceUnavailable, "audit config not available in non-persistent mode")
	}

	events := make(map[string]any, len(base.AuditEvents))
	for id, descriptor := range base.AuditEvents {
		// skip global and non-filterable events
		if descriptor.IsGlobalEvent || (showOnlyFilterable && !descriptor.FilteringPermitted) {
			continue
		}

		idStr := id.String()
		_, eventEnabled := enabledEvents[id]

		if verbose {
			events[idStr] = HandleDbAuditConfigBodyVerboseEvent{