> Interesting. Why exactly?

Because that's an auditing feature and if even somebody by accident (e.g. using WebDAV) can bypass that this seriously destroys trust in ownCloud as a secure file storage solution at all. We're aiming at big enterprises, such mistakes are a no-no in such environments.

We're currently just lying at the admin and admins may rely on this information (e.g. somebody in your company has leaked data and the employee claims that he wasn't logged in at that time). 

I believe that if we add this feature we have to do it right or we don't have to implement it at all because it's snake oil. Any function that could be understand as security feature by the user has to implemented properly.

> Nah, would need a different hook. The login hook transports login name and password, and the password we definitely not know at this point.

ACK.