Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Usenet -> c.d.o.misc -> Re: Audit Trail challenge

Re: Audit Trail challenge

From: Jerry Gitomer <jgitomer_at_erols.com>
Date: Sun, 4 Jul 1999 01:05:31 -0400
Message-ID: <7lms09$rfi$2@autumn.news.rcn.net>


Hi,

    Have you double checked the generated codes for the "queries" that are being run by the users who your audit trails show are deleting the rows from the tables? From what you say I suspect that one or more of the "select froms" is in actuality a "delete from". From what I remember of Power Builder you will have to check the code on both the server and on the clients. Look for different objects with the same name, you know the sort of thing that happens when more than one developer is involved in a project and two of them use the same name for different functions.

regards
Jerry Gitomer


John Doe wrote in message <7lh4t4$jvk$1_at_amdint2.amd.com>...
>Hi
>I am a fairly new DBA and is currently facing a challenge.
>Recently a superuser of our HR database has complained that some of the
>employee training records are disappearing from our Oracle 7.3.2 database.
>(The user interface for the HR application is built using Power Builder
5.0)
>.I have setup the audit trail on that table but it doesn't help much, only
>confusing the issue further, as the trail shows that certain users has been
>deleting data but the users were denying it saying they were just doing
>queries. Furthermore the trail shows multiple rows of deletion at the very
>same time, which is not possible thru the user interface (they can only
>delete one record at a time), and the users do not have any access to the
>database server or SQLplus tools at all.
>What we would need now is an alogorithm to show who is doing what SQL
>statement whenever a delete is attempted on that particular table.
>Whould greatly appreciate if anyone could help shed a light on this.
>Pls reply to wk.teoh_at_amd.com
>Thanks a lot
>Terence
>
>
Received on Sun Jul 04 1999 - 00:05:31 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US