quick qestion about logon/logoff triggers - does system have to own them?

From: GS <GS_at_GS.com>
Date: Wed, 26 Sep 2007 14:59:28 GMT
Message-ID: <ktuKi.15178$nO3.4515@edtnps90>

In order to keep the SOX beancounters-from-hell(Auditors) at bay I have to provide a report for my boss that shows who logged on to which database, from which machine, to which database, with which app, etc.

I plan on putting in a simple table that will get populated by two triggers, one after login and one before logoff.

Do the logon/logoff triggers have to be owned by system or sys? I was thinking I'd create an "audit" user with its own tablespace (or use the tools tablspace) and keep the table out of the system/sys schemas.

Out of curiousity, how much of a PITA has it been for anyone else out there implementing SOX, and to what lengths did you go to become compliant?

thanks Received on Wed Sep 26 2007 - 09:59:28 CDT