But those are technicalities. I imagine the intended feature is learning about who read some information, and who modified it. The implementation varies, but

But those are technicalities. I imagine the intended feature is learning about who read some information, and who modified it. The implementation varies, but on a CRUD app it seems easy: an authenticated GET or PUT request against a file path - easy audit log. If you are copying information to another place, and make it accessible there in a lossy way that is hard to audit... you broke your auditing system. Maybe it's useful, maybe it's a trade-off, but is something that should be disclosed.