RE: Auditing original user in an n-tier environment

Home-grown applications can use dbms_application_info to pass the true end-user where one Oracle user is used.

HTH -- Mark D Powell --

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Freeman, Donald Sent: Monday, May 09, 2005 2:19 PM
To: george.rusnak_at_deca.mil; oracle-l_at_freelists.org Subject: RE: Auditing original user in an n-tier environment

I have the same problem. My users are using Cognos and SAS. SAS is in
=3D a pilot project and apparently, it can do the pass through you are =
=3D

describing. Cognos logs user access to a file. Cognos provides a schema
=3D you can build and load the log files to it for better management. =
Its
=3D kind of clunky and doesn't give you row level auditing. Is the App =
=3D

something built in house or a COTS product?

Don Freeman
Database Administrator 1
Pennsylvania Dept of Health
Bureau of Information Technology
717-783-8095 Ext 337

-----Original Message-----
From: oracle-l-bounce_at_freelists.org
[mailto:oracle-l-bounce_at_freelists.org]On Behalf Of Rusnak, George A. (SEC-Lee) CTR
Sent: Monday, May 09, 2005 1:51 PM
To: oracle-l_at_freelists.org
Subject: Auditing original user in an n-tier environment

GURUS,
Oracle EE: 9.2.0.5
Hardware: HP-UX

3 tier architecture: Presentation, Application and Database. Language: Cold Fusion

Challenge:=3D20
How do we capture the user logging into the Presentation layer and pass
=3D that original user id through the Application layer to the database =
=3D

layer and be able to capture that original user id in the audit logs. =
=3D

The Application layer always connects to the database as the SAME user =
=3D

NOT as the original user. We need to know what code goes in what tier. I have read and searched but cannot find a doc on how to do this. With =
=3D

all the multi-tier architectures out there I was hoping to find a ton of
=3D information on this subject.

THANK YOU, Al Rusnak
* 804-734-8210
* george.rusnak_at_deca.mil

--
http://www.freelists.org/webpage/oracle-l
--
http://www.freelists.org/webpage/oracle-l
--
http://www.freelists.org/webpage/oracle-l