Hello! I'm currently developing an ASP.NET Human Resources System. I'm using a layered architecture with Web Client Software Factory, which is based on MVP pattern. ORM is NHibernate. And I need to implement an Audit Log module. I've read a lot about different approaches. Most of them describe how to track date, timastamp and identity of...
How can I maintain a log of the data in my DB? I have to maintain a log of every change made to each row. That means that I can't allow DELETE and UPDATE to be performed. How can I keep such a log? ...
For a project I am working on, I have been asked to create an audit trail of all changes that have been made to records. This is the first time I have had to create an audit trail, so I have been doing a lot of research on the subject. The application will be developed in PHP/MSSQL, and will be low-traffic. From my reading, I have pre...
Are there any best practices for audit trail implementation for HIPPA starting with database design. ...
I am using a trigger in PostgreSQL 8.2 to audit changes to a table: CREATE OR REPLACE FUNCTION update_issue_history() RETURNS trigger as $trig$ BEGIN INSERT INTO issue_history (username, issueid) VALUES ('fixed-username', OLD.issueid); RETURN NULL; END; $trig$ LANGUAGE plpgsql; CREATE TRIGGER update_issue...
My memory is failing me. I have a simple audit log table based on a trigger: ID int (identity, PK) CustomerID int Name varchar(255) Address varchar(255) AuditDateTime datetime AuditCode char(1) It has data like this: ID CustomerID Name Address ...
given this table definition create table herb.app (appId int identity primary key , application varchar(15) unique , customerName varchar(35),LoanProtectionInsurance bit , State varchar(3),Address varchar(50),LoanAmt money ,addedBy varchar(7) not null,AddedDt smalldatetime default getdate()) I believe changes will be minimal, usu...
I have been playing around with the idea of a single audit table for a few tables in my database. I found the code on this page: http://www.simple-talk.com/sql/database-administration/pop-rivetts-sql-server-faq-no.5-pop-on-the-audit-trail/ I like the idea, but the only that I am a bit puzzled with is how you would query out the informa...
I am currently playing around with the idea of having history tables for some of my tables in my database. Basically I have the main table and a copy of that table with a modified date and an action column to store what action was preformed eg Update,Delete and Insert. So far I can think of three different places that you can do the hi...
Pretty general question regarding triggers in SQL server 2005. In what situations are table triggers fired and what situations aren't they? Any code examples to demonstrate would be great. I'm writing a audit based databases and just want to be aware of any situations that might not fire off the triggers that I have set up for update,...
I'm developing Java apps on Tomcat 5.5 using JNDI to connect to shared dbcp connection pools with JDBC 3.0 drivers and DB2 8 on zOS and also DB2 9 on LUW. In my app, I use org.springframework.jndi.JndiObjectFactoryBean to get the dataSource and feed it into an org.springframework.jdbc.core.simple.SimpleJdbcTemplate to run the queries. ...
Corporate security policies are starting to require low level event logging. For example, file access permission changes. One solution is to use SELinux but our knowledge of this is sparse at best. Another is to replace the command with a proxy which performs auditing (this sucks though). Any ideas? ...
Our current enterprise solution is a ASP.NET MVC application driven by the Entity Framework. There are a couple links on how to hook into the change events for auditing. I'm not really interested in this. I'm interested in enterprise level auditing architecture. Those of you with the enterprise level battle wounds, what has been yo...
I've been looking at some auditing hooks with Entity Framework. Many of them show old/new value comparisons. This does great for an audit trail but I'm looking to snapshot objects. For example... Let's say I have an application that manages products. A product has multiple attributes and associated other objects. Let's say I chan...
I'm starting to use SQLAlchemy for a new project where I was planning to implement an audit trail similar to the one proposed on this quiestions: http://stackoverflow.com/questions/328898/implementing-audit-trail-for-objects-in-c http://stackoverflow.com/questions/315240/audit-trails-and-implementing-sox-hipaa-etc-best-practices-for-se...
Guys, The topic of how to audit tables has recently sprung up in our discussions... so I like your opinion on whats the best way to approach this. We have a mix of both the approaches (which is not good) in our database, as each previous DBA did what he/she believed was the right way. So we need to change them to follow any one model. ...
I'd like to audit the equipment of my large network in the fastest way possible. Should i use Nmap::Parser or Nmap::Scanner? I want to create a list of IP addresses that return a ping as well as a related OS footprint and identification. Example: ping 192.168.*.* Then when I get a successful ping, store the IP address in a hash along...
I am using SubSonic 3.0.0.3 in SimpleRepository mode. I was wondering how to get Subsonic 3 to automatically create and populate the createdon, createdby etc audit fields that were standard in version 2.x . Is this something I have to configure with the T4 templates? ...
Can anyone recommend a site security audit service? One thats simple to sign up to online and audit sites for xss, sqlinjection, buffer overflow, etc etc. Thanks ...
Given the following object model class Test { ... public string Name {get;set;} public IList<Test2> Collection {get;set;} //mapped with cascade="all" } class Test2 { ... public string Name {get;set;} } and code sample var test = new Test(); test.Collection.Add(new Test2(){Test=test,Name="1"}); //saving new entity with N...