RE: Auditing, how to capture sql statement issued

Actually it is a co-worker and they are using version 8. To best of my knowledge they have an application
they all users are suppose to use. Apparently there are some management types that think they can make
changes to the data outside the application via SQL. They want to capture all DML statements I think
on a particular set of tables. I am not sure how they would distinguish if changes were made from within
the application or via sql. Taking sql,etc away is not an option here.

Thanks
Rick

> -----Original Message-----
> From: Hannah.M.Doran_at_sb.com [SMTP:Hannah.M.Doran_at_sb.com]
> Sent: Wednesday, January 17, 2001 11:08 AM
> To: Multiple recipients of list ORACLE-L
> Subject: RE: Auditing, how to capture sql statement issued
>
>
>
> What version of Oracle are you using? Also, maybe I missed a post, but
> what
> EXACTLY are trying to do. And why? There may be a better way around it.
> If it
> is one user in quesiton, I think that there is a on create session trigger
> now.
>
> If you want something to periodically scan users, you could write code in
> the on
> session trigger to randomly *audit* a session and then just audit that
> user,
> then next time, choose another. Might be less of a performance hit.
>
> However, if you are concerned about tables containing sensitive
> information, and
> you want to audit only selects, then that's different.
>
> I'm just curious as to what your requirments are.
>
>
> --
> Please see the official ORACLE-L FAQ: http://www.orafaq.com
> --
> Author:
> INET: Hannah.M.Doran_at_sb.com
>
> Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051
> San Diego, California -- Public Internet access / Mailing Lists
> --------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB ORACLE-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
Received on Wed Jan 17 2001 - 12:14:22 CST