Re: oracle system audit for local host activity

I am not necessarily arguing with the above statements, but I would rather have a different approach:
* isolate the individual users from the application users at the
database level (separate database accounts)
* audit any user (or only those you want to) which is not in the
application users list

In addition, by implying logon trigger you can better control who can access certain accounts, from where, and using what type of client.

I know it sounds like "a lot of work", but at the end of day it gives you better control over your database utilization.

Cheers,
Valentin Received on Sat Oct 14 2006 - 11:40:06 CDT