Access guards for multi-tenant logging
AssigneeRed Hat, Inc.
InventorsJeffrey Jon Cantrill, Eric M. Wolinetz, Luke R. Meyer
Life of this patent
Estimating the term…
Abstract
Implementations of the disclosure describe access guards for multi-tenant logging. A method of the disclosure includes receiving an access request to access a logging stack comprising application logs, wherein the access request identifies a user identifier, identifying an authorization token associated with the user identifier, wherein the authorization token references an access role, and determining whether the application logs from the logging stack are accessible in view of the access role.
Claims20
A method comprising:
- receiving, by a processing device, an access request to access a logging stack comprising application logs, wherein the access request identifies a user identifier;
- identifying, by the processing device, an authorization token associated with the user identifier, wherein the authorization token references an access role;
- and
- determining whether the application logs from the logging stack are accessible in view of the access role.
A system comprising:
- a memory storing an access control list;
- and
- a processing device, operatively coupled to the memory, to:
- receive an access request to access a logging stack comprising application logs, wherein the access request identifies a user identifier;
- identify an authorization token associated with the user identifier, wherein the authorization token references an access role;
- and
- determine whether the application logs from the logging stack are accessible in view of the access role.
A non-transitory computer-readable storage medium comprising executable instructions that when executed, by a processing device, cause the processing device to:
- receive, by the processing device, an access request to access a logging stack comprising application logs, wherein the access request identifies a user identifier;
- identify an authorization token associated with the user identifier, wherein the authorization token references an access role;
- and
- determine whether the application logs from the logging stack are accessible in view of the access role.
Dependencies are inferred from the claim text.