Overview deleted attachements

[Silke Baumgarten]

Dear all,

I'm trying to figure out if there's a way to know who and when someone deleted an attachment. I think it's important to have this information for a complete audit trail.

I found a feature request: https://jira.atlassian.com/browse/CONFCLOUD-13943

but I'm not sure if it's what I need.

I just want to see who deleted an attachment and when, I don't need to compare different versions. Any ideas on how to achieve this?

How do you ensure a traceable audit trail for attachments in your confluence?

Thanks!

[Owen Wallis]

Hi, I know a team in Atlassian who are starting to look into this space

@Ben Magro - could be worth you talking to the customer above

[Jonathon Yu]

Hey @Owen Wallis I've replied to the OP in context, but if you run into any other issues that can be solved by improvements to the audit log, feel free to tag/forward to me rather than Ben, since I'm covering all things audit log in Cloud.

[Kristopher Perez]

There really isn't a good audit (as far as I know) for specific deletions within a Space.  My recommendation (and what I have done in my environment) is to remove Attachment deletion as a permission for everyone.  This does not prevent someone from removing an attachment on a page.  If someone does, the page is modified, but the attachments are stored at the Space level so it will remain available if it is ever needed to be reference again.

Kris

[Silke Baumgarten]

Sorry Kristopher for the late reply I haven't got a notification that you replied. Thank you for the reply :)

The problem is not that somebody can remove the attachment - as you said this can be handled via permissions. I think this is sufficient.

The problem is the following: if somebody deletes an attachment where is this information stored (who has deleted which attachment when?)? If you have a regulated Quality Management System you have to prove in an audit that you can retrace this.

[Kristopher Perez]

Yeah, there really isn't anything that Confluence does natively to help with this.  Even a look at the Atlassian Marketplace doesn't yield much in the way of audit trails for attachments.  https://marketplace.atlassian.com/search?hosting=cloud&product=confluence&query=attachment

Even looking up the topic of using Confluence as a QMS is pretty bleak.  It's a great collaborative Wiki, but these kind of requirements make Confluence an unsuitable tool for QMS.

Wish there were a better answer on that front :(

Kirs

[Jonathon Yu]

Hey @Silke Baumgarten sorry to hear that you're not able to get what you need out of the audit log. My team is aware that attachments are a gap in audit coverage right now - no word yet on when it might get fixed, but it is on our radar. 

If you have other audit coverage needs that aren't being met, please let me know (and if you want to talk through them more comprehensively I'm also happy to jump on a call).