Released 2016-12-01

NOTE - THIS IS NOT A PUBLICLY AVAILABLE RELEASE.

IMPORTANT CHANGES

Open-AudIT 1.14 is intended to be the precursor to Open-AudIT 2.0. As such it has changed the way a lot of items in the application work. Please thoroughly read this document before upgrading.

Groups Deprecated

Groups as the primary source of authorisation have been deprecated. A user no longer has a permission on a group. A user has a role which works in combination with an Org (see below).

Organisations Promoted

The primary method for authorisation (what objects user access) is now based on the users Org(s). A user can have access on multiple Orgs but is assigned a primary Org.

Users and Roles

The primary method for authorisation (what a user can do) is now based on the users Roles. Roles are defined as admin, org_admin, reporter and user. Each role has a set of permissions (Create, Read, Update, Delete) for each endpoint. Standard roles (as shipped should cover 99.9% of use-cases. The ability to define additional roles and edit existing roles is enabled in Open-AudIT Enterprise.

Endpoints

Each object with Open-AudIT now has an endpoint. An endpoint is used in the URL and JSON API for creating, reading, updating and deleting objects. Endpoints exist for - configuration, connections, credentials, database, devices, discoveries, fields, files, groups, help, ldap_servers, locations, logon, logs, networks, orgs, queries, roles, scripts, summaries, users. Endpoints are used in combination with the request type (GET, POST, PATCH, DELETE) to enable management of the objects within an endpoint. We have tried to be as close as possible to http://jsonapi.org in our implementation.

Summaries v Queries

What used to be called queries or reports within Open-AudIT are now split into two different endpoints. The difference being that a Summary uses "group by" in it's SQL and provides the ability to "drill down" through results. A good example being the Installed Software summary. Regular old queries that provide a simple list of things remain the same. By default all queries are now active. No longer do you need to activate individual queries. Summaries also have a special collection page that shows icons and counts for the other endpoints. By default the homepage is set to groups, but this can be changed to summaries.

Active Directory Discovery

Because we now have a discoveries endpoint and because the entire objective of Open-AudIT is to find out "What's on your network?", Active Directory discovery has changed. Now when you configure an Active Directory discovery, Open-AudIT will reach out to the Domain Controller you specify and ask for a list of subnets in Active Directory. It will then create a discoveries item for each subnet and run them. This way you'll find every device including printers, switches, routers and everything else - not just Windows PCs.

Change Log