Turning off user operation log authentication restriction fails to log unauthenticated user-operations

Hi @Zach_Hubbs,

what do you want to achive?

From a security point of view you should log all operations, also them which are done through the REST API.

For this, you have to activate the user authentication on the REST API. In spring boot, you can do it as described here: https://github.com/camunda-consulting/code/tree/master/snippets/springboot-rest-api-basic-auth.

On the other hand, if you don’t care about user authentication, you can add

camunda:
  bpm:
    generic-properties:
      properties:
        restrictUserOperationLogToAuthenticatedUsers: false

to your application.yml.

I got the desired entries in ACT_HI_OP_LOG with these settings.

Hope this helps, Ingo