Advanced logging of Work Item and Work Item Attachments accessed by users of the system

The GE Aerospace team has been required by the UK Government to provide individual access proof of Work Items in the Engineering Workflow Management (EWM) application. This is a Compliance requirement to be able to demonstrate that exports of information and or data is only performed by correctly designated people. The need is to provide output in a log that shows when a Work Item in EWM is accessed by a user of the system, showing an id or identifier of that user and the date that is was accessed. We also need record of when a Work Item attachment is accessed in the logs. Work Item attachments can be accessed without directly accessing the Work Item, so would need a separate record for that.

Entries in the log should be recorded in a similar way that source code files are listed out in the ccm-scaa-content.log. See example below from that log:

2024-11-05T05:21:59,461-0500 SCAA:210035947/FileItem,.project,_sJdMkERBEeqHFanVmuGMIA,_uWGN1kRCEeqhq7UMbL-Jtg/commons-windchill-robotframework,_kBsjckQOEeqhq7UMbL-Jtg

List the date accessed first, then identify the user (210035947 is my userid in the system) and then list out the identifier of the object.

A nice to have would be to print out the name of the project area that the Work Item resides in.

It may be helpful to know that we are aware of a similar feature that IBM recently built for ERM and JTS to log access requests that was funded by GE Hitachi.  Our functional need is similar to that work, except we need it for Work Items in EWM.

We also did find that HTTP logging in EWM does seem to log the work item and access info, so perhaps that functionality could be leveraged. This was added to a local install. An example of such a log entry is below:

<httpEndpoint id="defaultHttpEndpoint" httpPort="9080" httpsPort="443">

   <accessLogging filepath="${server.output.dir}/logs/http_defaultEndpoint_access.log"

                  logFormat='%h %i %u %t "%r" %s %b %D %{R}W' />

</httpEndpoint>             

After visiting the work item, the output in the log file was found:

10.0.1.7 - svh [09/Oct/2024:13:36:24 -0400] "GET /ccm/service/com.ibm.team.workitem.common.internal.rest.IWorkItemRestService/hasWorkItemChanged?itemId=_fjZ8kLT1Eey-tJfZcJ7dqA&stateId=_tq8VILsuEeyYS8H-Rr8Zlg&linksCount=0&linksHash=0 HTTP/1.1" 200 263 5714 5436