防篡改日志模块

From Dolibarr ERP CRM Wiki
Revision as of 06:10, 6 September 2023 by ShengGang (talk | contribs) (ShengGang moved page 不可更改的归档日志模块 to 防篡改日志模块: 之前的翻译不准确)
Jump to navigation Jump to search


不可更改的归档/日志
模块ID 30
用户手册 本页
开发文档

简介

"防篡改日志"模块允许将某些业务事件记录到不可更改的日志/归档中。事件将实时归档。归档文件是一个只能读取和导出的链式事件表。 因此,该模块提供了用户无法更改的可追溯性功能。

本模块允许您与某些国家的法律要求兼容(例如法国的反增值税欺诈法,称为2016年金融法,有时被错误地称为NF525标准)。请参阅页面 2016年关于收银机软件和NF525或LNE认证的财政法案 以获取更多信息)。

安装

该模块包含在 Dolibarr 发行版中,因此无需安装。

配置

要使用此模块,必须首先使用管理员帐户通过菜单选项 "主页 - 设置 - 模块"启用它:

选择列出模块的选项卡。然后点击 "激活"。。

模块现在已激活。

如果在该模块的行尾出现一个齿轮图标Cog.png,则单击它以访问特定于模块的设置页面。

使用方法

模块被激活后,并没有什么特别的操作要做。应用程序的使用方式就像模块未被激活一样。不同之处在于,一些管理操作将在被称为防篡改日志(表)中进行跟踪。被跟踪的事件如下:

  • 录入付款(根据2016年金融法,这种情况在法国是强制性的)
  • 停用/重新激活 防篡改日志模块

By unalterable, it must be understood that the maximum has been achieved to reduce the risk of modifying a record. This includes the following points:

  • There is no functionality in the application to delete or modify a line.
  • Each record of this log is protected by a checksum that depends on the data of the record, making the checksum invalid in case of an attempt to modify the record (following a database hack for example).
  • Each checksum is chained with the checksum of the previous record, so that it is not possible to hack a checksum chain of a record without invalidating the previous record in turn.
  • A program signature can be defined to validate a state of the program code and a verification tool can be used to identify if a file has been modified (e.g. as a result of a server hack) making it detectable if computer code has been modified in an attempt to bypass the unalterable log mechanism.

读取已归档的日志

To browse the list of archived event, a tool is available into menu Tools - Unalterable Archives/Log - Tab "Unalterable Logs".

You need the permission "Read archived events and fingerprints" to be able to access this area.

You can filter on a date and export the list of events into a CSV file.