73de2964 by Ean Schuessler

Fix audit record authorization issues

- Wrap all artifactHit.update() calls with authz disable/enable
- Ensures mcp-user can create and update audit records
- Fixes ArtifactAuthorizationException on audit logging
1 parent 3eb03965
......@@ -671,11 +671,17 @@
} catch (Exception e) {
def executionTime = (System.currentTimeMillis() - startTime) / 1000.0
// Update audit record with error
// Update audit record with error
artifactHit.runningTimeMillis = executionTime
artifactHit.wasError = "Y"
artifactHit.errorMessage = e.message
artifactHit.update()
ec.artifactExecution.disableAuthz()
try {
artifactHit.update()
} finally {
ec.artifactExecution.enableAuthz()
}
result = [
content: [
......@@ -942,11 +948,17 @@
result = [contents: contents]
// Update audit record
artifactHit.runningTimeMillis = executionTime
artifactHit.wasError = "N"
artifactHit.outputSize = new JsonBuilder(result).toString().length()
artifactHit.update()
// Update audit record
artifactHit.runningTimeMillis = executionTime
artifactHit.wasError = "N"
artifactHit.outputSize = new JsonBuilder(result).toString().length()
ec.artifactExecution.disableAuthz()
try {
artifactHit.update()
} finally {
ec.artifactExecution.enableAuthz()
}
} catch (Exception e) {
def executionTime = (System.currentTimeMillis() - startTime) / 1000.0
......