Login password read

Community Feedback
5

Hi :wave:

All passbolt actions are logged in action_logs, even in the CE version.

You can get a list of passwords accessed by a user with this SQL request:

SELECT
       al.created,
       u.username,
       r.name,
       r.uri,
       r.deleted
FROM
       action_logs al
       INNER JOIN actions a ON al.action_id = a.id
       INNER JOIN users u ON u.id = al.user_id
       INNER JOIN secret_accesses sa ON sa.created = al.created
       INNER JOIN resources r ON sa.resource_id = r.id
WHERE
       a.name = "ResourcesView.view";

Another request example, if you want to search all actions made between last september 14th and 15th:

SELECT al.created AS Datetime, u.username AS Username, a.name AS ActionName, al.context AS Context
FROM action_logs al 
JOIN actions a on a.id = al.action_id
JOIN users u on u.id = al.user_id
WHERE al.created > "2022-09-14 00:00:00" AND al.created < "2022-09-15 00:00:00"
ORDER BY al.created asc;

Best,

2 Likes