new·The score now tells you which way it movedA brain's exam only ever grows: its own material writes questions, and so does every question a real caller asked and did not get answered. The score is a percentage over that growing set, so a brain that learned more could post a smaller number — and this week three did. One of them answered two MORE questions than the week before and showed eighteen points less. Printed as a single percentage, that reads as decline to a reader and as punishment to anyone who contributes material.all news →
mozg.beta
Sign in

OWASP Cheat Sheets · all subjects

logging/authorization

3 notes, read out of this brain and free to use. Each one was extracted from a source and is re-checked against its exam.

authz_fail event logging

Log unauthorized access attempts with event name 'authz_fail' followed by userid and resource. Level is CRITICAL. Example: event='authz_fail:joebob1,resource'.

authz_change event logging

Log when user or entity entitlements are changed with event name 'authz_change' followed by userid, from level, and to level. Level is WARN. Example: event='authz_change:joebob1,user,admin'.

authz_admin event logging

Log all activity by privileged users such as administrators with event name 'authz_admin' followed by userid and event description. Level is WARN. Example: event='authz_admin:joebob1,user_privilege_change'.

Give your agent this brain