Re: [Health-dev] res_user_login_attempt

[Luis Falcon]

Dear Edgar

On 10/6/21 09:58, Edgar_H wrote:
> Good morning, dear Luis!
>
> Thank you very much for this information!
>
> Is there also a permanent table which logs the successful logins? This 
> would be important because of data rights and tracking of access to 
> health data.
No, but we can log it at operating system level raising the verbosity / 
log level of the Tryton kernel.

In fact, the best way to log both successful and unsuccessful logins 
would be at OS level, ( or with temp tables that do not generate redologs).

All the best
Luis


> Thank you very much!
>
> All the best
>
> Edgar
>
>
> Am 06.10.2021 um 09:39 schrieb Luis Falcon:
> > Good morning, dear Edgar!
> >
> > It is a temporary table that records login attempts from users, and 
> > serves to create a progressive delay anytime the user enters the wrong 
> > password. In the newer versions, Tryton has also implemented logging 
> > the IP address.
> >
> > You can find the code at res/user.py
> >
> > All the best
> > Luis
> >
> >
> > On 10/4/21 19:30, Edgar_H wrote:
> > > Dear Luis,
> > >
> > > dear all,
> > >
> > > I have been asked how GNU Health records user logins.
> > >
> > > With pgAdmin I found the table res_user_login_attempt, but there is 
> > > no data stored. Fields are id, create_date, write_date, create_uid, 
> > > write_uid, login, ip_address, ip_network.
> > >
> > > Has the recording into this table to be activated somehow? I did not 
> > > find it in the documentation.
> > >
> > > Thank you very much!
> > >
> > > All the best
> > >
> > > Edgar

--
Dr. Luis Falcon, MD, MSc
President, GNU Solidario
Advancing Social Medicine
www.gnuhealth.org