Details
-
Improvement
-
Resolution: Unresolved
-
Major - P3
-
None
-
None
-
None
-
None
-
Server Security
Description
During SERVER-43894 is was observed that there are error locations that do not appear to have audit logging coverage, along with errors that do: there is inconsistent audit logging.
Perhaps some kind of new scope guard could be put in place to catch error throws as well as the final command reply. Instead of error by error point audit logging. It is likely worth investigating other commands for which audit logs are made, to ensure their coverage.