Class DefaultApplicationAuditValuePolicy
- Namespace
- ProjectTemplate.Infrastructure.Data.Auditing
- Assembly
- ProjectTemplate.Infrastructure.dll
Includes audited values unchanged except for the personal fields the template ships, which are masked.
public sealed class DefaultApplicationAuditValuePolicy : IApplicationAuditValuePolicy- Inheritance
-
DefaultApplicationAuditValuePolicy
- Implements
- Inherited Members
Remarks
Audit records are durable and retained, so a value written here outlives the row it describes. This policy masks the contact fields on ExternalLoginAccount because a generated application would otherwise persist an end user's email address and display name into audit history the first time an external login is created or updated, without the consumer having chosen that. Masking still records that the property changed, so the audit trail keeps its accountability value without carrying the value itself.
Every other property is included unchanged. Applications that add entities carrying personal data should replace this policy rather than extend it, since the fields worth protecting depend on the application's own model. See the audit accountability documentation for the replacement seam.
Masking is used rather than hashing. The hash disposition is an unsalted SHA-256, which does not protect a low-entropy value such as an email address: an attacker holding the audit table can recover addresses by hashing candidates. Hashing suits high-entropy identifiers where correlation matters more than secrecy.
Methods
Evaluate(Type, string, object?)
public ApplicationAuditValueDecision Evaluate(Type entityType, string propertyName, object? value)