Are changes NOT made via the UI audited/logged?

[nibeck]

This question is in reference to Atlassian Documentation: Auditing in JIRA applications

If an admin uses SQL to directly manipulate data, are those actions audited/logged anywhere?

[Nic Brough -Adaptavist-]

No, they are not.

And, if your admin is doing this, sack them.  There are only a handful of cases where using SQL on a JIRA database is ok, and they're all about fixes for specific issues. 

[nibeck]

Thanks, I agree. No-one is doing this, but I am trying to answer some questions from auditors. Namely, IF this happened, will it be audited? 

Thanks again for the prompt reply!

[Nic Brough -Adaptavist-]

Ok, that's a good reason to ask.  There's no way that someone with full access to a database can be tracked making manual changes.  You'd need to implement something at the database level, it doesn't really have anything to do with JIRA directly.  It can't know if someone is fiddling with its data.