Enum AuditMode
Whether a call through an enforcement proxy is recorded in the audit log, declared on the method rather than configured centrally.
public enum AuditMode
Fields
Access = 2Recorded as an access trace —
AuditEventType.ServiceCall.Change = 3Recorded as a change —
AuditEventType.DataChange, so it survives a host filter that drops service calls, and the log view's Event filter can separate it from access traces.Default = 0Use the host's
AuditOptions.DefaultAuditMode. What an unannotated method gets.None = 1Not recorded. Denials are still written.
Remarks
What separates a read worth recording from a read that is noise is intent, and only the declaration site knows it. Opening a case is worth recording; fetching the case-type list to draw a dropdown is not — and both go through the same kind of scope-checked method, so no global rule can tell them apart. That is why this sits on the attribute that already carries the access decision, next to the method it governs.
A method that says nothing gets Default, which defers to
AuditOptions.DefaultAuditMode. Deferring is deliberately the zero value: an unannotated
method must mean "the host has not been asked", never a decision taken on the host's behalf.
A refusal is recorded whatever this says. Suppressing an access trace is a statement about recording who read something; it is not a statement about concealing who was refused. Denials are written under every mode.