| oracle 9i and user activity logging [message #428382] |
Wed, 28 October 2009 03:02  |
user_pg_2009 Messages: 6 Registered: October 2009 Location: libreville |
Junior Member |
|
|
Hi expert,
i am new on the matter but i have to trace the user activity and build a small application.
those are the specifications :
i'm using 3 oracle 9i database version on 64 bit
the O.S. used is Unix Aix 5.2
for each database i am using i have to trace the user activity for all of them
i have created some triggers to get some information, but still the work is there :
create trigger ... after logoff on database .. begin insert into table xx_tab ( ,,,,) end ;
create trigger ... after ddl on database .. begin insert into table xx_tab ( ,,,,) end ;
create trigger ... after logon on database .. begin insert into table xx_tab ( ,,,,) end ;
create trigger ... after servererror on schema .. begin insert into table xx_tab ( ,,,,) end ;
Here is the issue i am faced to /
how could we simulate a create trigger ... after DML on database or schema ? as far as i know we trigger a DML only on a specific table. Is there any possibility to trigger a DML on any database object or schema directly?
for the moment i don't know if it 's the good think to do but, but it's a try, if you have any idea or other methods to trace that user activities on DB, please don't hesitate to get me informed.
Rgds,
Paul
|
|
|
| Re: oracle 9i and user activity logging [message #428386 is a reply to message #428382] |
Wed, 28 October 2009 03:21   |
Michel Cadot Messages: 29436 Registered: March 2007 Location: Nanterre, France, http://... |
Senior Member |
|
|
Quote:how could we simulate a create trigger ... after DML on database or schema ?
You can't.
Why don't you activate AUDIT instead of using your own trigger. Do you think about the performances issue?
Regards
Michel
|
|
|
|
| Re: oracle 9i and user activity logging [message #429216 is a reply to message #428386] |
Mon, 02 November 2009 10:19   |
 |
ayush_anand Messages: 270 Registered: November 2008 |
Senior Member |
|
|
Really Strict Auditing
I have seen certain government settings where, for privacy reasons, they need to track who has seen various elements of any given record. For example, the tax office keeps very
detailed records as to how much you make, what you own, and so on. This is extremely sensitive information. Whenever someone queries up someoneʹs record and sees this sensitive information, they need to audit that. This is so they can audit over time to see if people are getting into records they should not be, or to retroactively find out who had access to certain information after a leak to the press, or some other exposure.
With autonomous transactions and views, we can do this in a way that is very nonintrusive and, to the casual end user using whatever tools, is totally transparent. They will not be able to get around it, and it will not get in their way. It will, of course, add additional overhead to the query, but this is really suited to those occasions where you pull up one record at a time, not hundreds or thousands of records. Given this constraint,the implementation is quite simple. Using the EMP table as a template, we can implement an audit on the HIREDATE, SALARY, and COMMISSION columns, so whenever someone views a SALARY for example, we know who looked at it, and even what record that they saw. Weʹll start by creating an audit trail table for our EMP table, which we copied from SCOTT previously in this chapter:
[copied from expert one on one oracle]
|
|
|
|
|
|
|
|
|
|
|
|
| Re: oracle 9i and user activity logging [message #429491 is a reply to message #429482] |
Wed, 04 November 2009 03:30   |
Michel Cadot Messages: 29436 Registered: March 2007 Location: Nanterre, France, http://... |
Senior Member |
|
|
Expert One on One is a T. Kyte's book you can find on amazon for instance. It has been superseded by his next book.
Why do you want to use a way that is 10 years old when new and more efficient solutions are available now?
Why do you want to rewrite what is built-in?
Regards
Michel
[Updated on: Wed, 04 November 2009 03:31]
|
|
|
|
|
| Re: oracle 9i and user activity logging [message #429738 is a reply to message #429549] |
Thu, 05 November 2009 09:36  |
user_pg_2009 Messages: 6 Registered: October 2009 Location: libreville |
Junior Member |
|
|
Hi all experts and gurus,
I have apreciated how much all of you have been involved on that thread topic, and i say thank you for all of you.
So, now we can consider the case (oracle 9i and user activity logging) is closed.
B.Rgds,
Herve
|
|
|