Question
Lloyds Banking Group PLC
GB
Last activity: 14 Jun 2021 7:38 EDT
Property values in audit tab are not automatically decrpted - Field level auditing
Hi,
I have encrypted a property value using the property encrypt access control policy (Underlying - used the data encryption with Platform cipher + AWS key ). The property value is automatically decrypted while showing on UI but not in Audit tab. Help says the values will be automatically - If no PropertyRead policy obfuscates the property, then the decrypted property value is visible to the user in a UI control.
Q1 )Can some one help why the decrypted value is not shown in Audit tab. Also how to achieve the same. ?
Also I have created the PropertyRead access control policy to show the masked value / clear value based on access control policy condition. I am able to achieve the same on UI but not on audit tab.
Q2) If the above is true does it mean access control policy condition's not applicable to data we show on audit tab?
Thank You, Surendra.PV
Lloyds Banking Group PLC
GB
Yes, I am seeing the encrypted value in Audit tab. As per the help If no PropertyRead policy obfuscates the property, then the decrypted property value is visible to the user in a UI control.
Updated: 14 Jun 2021 7:38 EDT
Pegasystems Inc.
IN
As we are not showing the property value directly in the audit history, it's not getting decrypted. We are getting the details which are stored in the History table.
Instead, while adding the property value to the History we can decrypt and send it.
Lloyds Banking Group PLC
GB
You mean to say decrypted value should be stored in the history table when ever I create/save the instance? - I don't think this is a good idea to that, and we should not be doing that..
Also - As we are not showing the property value directly in the audit history, it's not getting decrypted. We are getting the details which are stored in the History table. --> What do you mean by not showing the property value directly?
Updated: 14 Jun 2021 7:38 EDT
Pegasystems Inc.
IN
What do you mean by not showing the property value directly?-> It means we are not referencing a property in history, so it's no getting decrypted as expected.
Pegasystems Inc.
US
It is safest to leave the property as is - encrypted - in the history record since there is no way to conditionally decrypt or mask it's value to prevent unauthorized access
Updated: 14 Jun 2021 7:38 EDT
Pegasystems Inc.
IN
Yes, it would be safe it leave it as encrypted. If it's required we can show that property value in the case information.