Oracle-L: Testing

From: Jos Someone <jos1992831_at_yahoo.com.au>
Date: Mon, 12 Aug 2002 18:23:23 -0800
Message-ID: <F001.004B257F.20020812182323@fatcity.com>

Gene Sais <Gsais_at_co.palm-beach.fl.us> wrote: another suggestion:

disable default roles.
grant create session to all users.
use application to enable roles with password.

hth,
gene

>>> naveen_nahata_at_mindtree.com 08/09/02 01:58PM >>> Why to find who and when. the best thing is to restrict the access.

-----Original Message-----

Sent: Friday, August 09, 2002 10:44 PM
To: Multiple recipients of list ORACLE-L

Use a logon trigger to capture everything from v$session and you can look at program name etc...it will be pretty easy to figure out who and when. Something like this in the trigger...

select distinct sid into l_sid from v$mystat; insert into session_log (select * from v$session where sid = l_sid;

Ethan Post
perotdba (AIM), epost1 (Yahoo)

-----Original Message-----

Sent: Friday, August 09, 2002 11:49 AM
To: Multiple recipients of list ORACLE-L

Folks,

Before I go off re-inventing the wheel once again I'll ask the group is anyone has tried this before. What I have is a request from damanagement to tell them when someone connects to our PeopleSoft database using the schema username, but outside of PeopleTools. The reason is that there have been some
"unexplained" changes to data that have occurred over the last month that is causing a pile of concern. It is believed that someone who has the schema password is using SQL*Plus or Toad to update the data when they should not be
doing so. Now auditing connects for the schema account is not a problem, but
determining which are suspicious and which are due to the damned PeopleSoft panel processor I can't see a way around easily from sys.aud$. Anyone else been
there, done that??

Dick Goulet
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
INET: dgoulet_at_vicr.com

Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Post, Ethan
INET: Ethan.Post_at_ps.net

Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Gene Sais
INET: Gsais_at_co.palm-beach.fl.us

Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists

Yahoo! Digital How To- Get the best out of your PC!
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: =?iso-8859-1?q?Jos=20Someone?=
INET: jos1992831_at_yahoo.com.au

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists


--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message

to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Mon Aug 12 2002 - 21:23:23 CDT