Dual Permissions Data Logging System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data logging mechanisms in distributed applications often restrict access to sensitive data, leading to maintenance difficulties and limited flexibility in logging decisions, as they are hard-coded and do not consider user permissions, limiting reusability and requiring recoding for changes.
Innovation Solution
Implementing a dynamic dual-permissions based system that consults both administrative and user permissions to determine whether and what type of application data can be captured and logged, allowing for selective logging based on user preferences without requiring application recoding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data logging is hard-coded in the application, then data capturing and logging can be performed, but the code reusability is inhibited and maintenance difficulties are introduced
Solution Approach 1:
The patent segments the data logging functionality from the application code by implementing it as a separate module or service that can be independently configured and maintained. This allows the logging logic to be separated from the core application, improving both reusability and maintainability while preserving reliable data capturing capabilities.
Solution Approach 2:
The patent introduces dynamic configuration capabilities that allow logging parameters, permissions, and settings to be modified at runtime without requiring code changes. This dynamic approach enables administrators to adjust logging behavior through configuration files or interfaces, eliminating the need to recode the application for logging changes.
2Reliability
If data logging is hard-coded in the application, then data capturing and logging can be performed, but changes to logging decisions require recoding of the application
Solution Approach 1:
The patent implements dynamic configuration mechanisms that allow logging decisions to be changed without recoding. Configuration files, databases, or administrative interfaces enable runtime modification of logging parameters, permitted data types, and user permissions, providing adaptability while maintaining reliable data capturing.
Solution Approach 2:
The patent allows logging behavior to be controlled through parameter changes in configuration rather than code changes. By externalizing logging parameters (such as log levels, data types to capture, retention policies, and permission settings), the system becomes adaptable to different logging requirements without requiring application recoding.
3Object-affected harmful factors
If a restrictive policy is applied to data access, then access to sensitive data is secured, but the opportunity to assess application operation efficacy is reduced
Solution Approach 1:
The patent applies different access policies to different data elements based on their sensitivity and importance. Rather than a uniform restrictive policy, the system implements granular permission controls that allow sensitive data to be protected while permitting logging of non-sensitive operational data needed for efficacy assessment. This local differentiation of access rights resolves the contradiction between security and information availability.
Solution Approach 2:
The patent introduces an intermediary layer (such as a logging service or permission management system) that mediates between data security requirements and assessment needs. This intermediary can selectively capture and anonymize data, providing sufficient information for operational assessment while protecting sensitive information, thus resolving the conflict between restrictive security policies and information availability.
4Loss of information
If a liberal policy is applied to data access in application administration, then maximum opportunity to assess application operation is provided, but access to sensitive data without proper restrictions is enabled
Solution Approach 1:
The patent implements differentiated access controls that provide liberal access to non-sensitive operational data for assessment purposes while maintaining restrictive access to sensitive data. By applying local quality principles, different permission levels are assigned to different data types, allowing administrators to assess application operation effectively without exposing sensitive information.
Solution Approach 2:
The patent introduces an intermediary permission management system that filters and controls access to data based on sensitivity and user roles. This intermediary enables liberal access to operational data needed for assessment while automatically restricting access to sensitive data, thus resolving the contradiction between information availability and data security.
Data Source
AI summary
Embodiments of the present invention address deficiencies of the art in respect to application data logging and provide a novel and non-obvious method, system and computer program product for capturing and logging application data. In an embodiment of the invention, a method for capturing and logging application data can include consulting both administrative permissions for capturing and logging application data, and also user permissions for capturing and logging application data. Subsequently, application data can be captured and logged only if permitted by the administrative permissions and the user permissions. In this regard, it can be determined from either or both of the permissions whether capturing and logging of application data is permitted generally, and also a type or portion of the application data that is permitted to be captured and logged.