audit

database audit table

I have an existing application that I am working w/ and the customer has defined the table structure they would like for an audit log. It has the following columns: storeNo timeChanged user tableChanged fieldChanged BeforeValue AfterValue Usually I just have simple audit columns on each table that provide a userChanged, and tim...

How to write Audit methods in Java?

Hi folks, As my java application increases in complexity i want to write audit methods to make sure that i am doing the right thing. How can i do it in java? thx ...

Linq to SQL mapping data without a DataContext

Is it possible to access Linq to SQL mapping data without a DataContext instance? I ask because I am writing some audit data generation code that will only trigger for some entities and some entity columns. I would like to fix up this meta data in a static constructor prior to any Linq DB access. For example from a performance perspect...

Audit Logging in SharePoint MOSS

Hi We want to be able to view an audit of changes to groups/members/user profiles within MOSS. Can we do this out of the box or would we need a 3rd party tool? Is everything within MOSS audited somewhere or just certain aspects of it? All the best ...

Tracking a Change on a Column

I recently ran across a very interesting problem involving database design. I have changed the table names to simplify the problem, so let me describe it as such: I have 2 tables, fruit and vegetable each stores whether or not a fruit or vegetable is tasty. Now lets say that someone keeps changing the IsTasty setting through the UI of m...

Tracking sql agent Job changes - SQL Server 2008

Hey all - situation: Need track/audit changes in SQL jobs - to be reported in scom for example. SQL job exists job is changed (changed/scheduled/enabled/disabled, etc) Needed: trigger to check for this. Anyone out there already written one? Many thanks, Tom ...

MySQL auto-store datetime for each row

Lately I've been doing quite a few projects that require the use of back-end, including MySQL. However I'm quite sick of adding the columns dt_created and dt_modified (which are date time stamps for creation and last modified respectively) to all the tables I have in my database. Everytime I INSERT or UPDATE the database, I will have t...

Creating audit triggers in SQL Server

I need to implement change tracking on two tables in my SQL Server 2005 database. I need to audit additions, deletions, updates (with detail on what was updated). I was planning on using a trigger to do this, but after poking around on Google I found that it was incredibly easy to do this incorrectly, and I wanted to avoid that on the ...

What is best practise for getting current username in data access layer?

We recently added auditing to our database. A colleague implemented it using triggers and asked me to call a stored procedure on login to the website. The stored procedure inserts the current username, and the current oracle session id in a table so that the trigger could map a session id to a username. Problem is (or was) that he was as...

Auditing Exchange 2007 Mailbox Full Access Permissions with Powershell

Hi, I on occasion I get asked to produce a list of users who have Full Access rights to a particular Exchange 2007 Mailbox. At the moment I am doing this manually, and I'd ideally like to do it with Powershell. Is there anyway to produce a list of Full Access Permissions (and Send On Behalf rights would also be useful). Thanks, Jonny...

Auditing user identity in .NET - What's a good strategy?

I'm sure it's a requirement many developers have faced before: business needs an audit trail to know who is performing actions in their system. Regardless of how you choose store the audited information, the core of this problem is how to identify the current user. I want to write components, ranging from small domain model classes to ...

Database design for audit logging

Every time I need to desing a new database I spend quite some time thinking on how I should set up the database schema to keep an audit log of the changes. Some questions have already been asked here about this, but I don't agree that there is a single best approach for all scenarios: Database Design For Revisions Best design for a ch...

Trying to audit deletions with a half baked system.

My ERP system has a half baked deletion tracking system which inserts the following info into a table called M2MDeleteLog. I have left out unnecessary columns such as RecordId for simplicity. LogDate Workstation LogInfo 1/7/2010 11:01:51 TECH-M2MTEST Deleting 1 Rows From SOMast 1/7/2010 11:01:51 TECH...

Changing Group Policy Setting in Windows XP

My laptops security log is getting full of access events where NETWORK SERVICE is listening for incoming traffic. The audit policy for 'Audit object access' is set for failure and I want to disable it. It fails because the windows firewall is preventing connection. When I go to the GPO editor the checkboxes for changing the settings ar...

Secure Software License Usage Audit Log

Folks, We have an intriguing technical challenge. How to write a secure audit file that tracks usage of a software so license fees can be based on usage thereby making it more affordable to those who use it less. Specifically, TickZoom sells a alpha generation trading platform for hedge funds which presently costs $2,000/month to licen...

Linq to SQL Audit Trail / Audit Log: should I use triggers or doddleaudit?

Hi, I'm working on a business app that requires that ALL database transactions be audited (for legal purposes mainly). I've looked around the web and came across DoddleAudit (http://www.codeplex.com/DoddleAudit) which basically adds the ability for Linq to SQL to track the changes. Much like people use Interceptors in Hibernate. The th...

ASP.NET - Log User Session Start/End Times for Audit Trail - Global.ASAX?

My ASP.NET intranet web application uses Windows Authentication, and I would like to record the following details: 1) Windows ID 2) Session Start Time 3) Session Stop Time 4) URL being browsed to (optional) I've got some basic code setup in "Session_Start" method of the Global.ASAX to log session start times (seen below), but that's it...

Oracle - Triggers to create a history row on update

First, we currently have the behavior that's desired, but it's not trivial to maintain when any changes to the database are needed. I'm looking for anything simpler, more efficient, or easier to maintain (anything that does any of those 3 would be most welcome). When we perform an update, a history row is created that is a copy of the ...

Reviewing 3rd Party code for security issues

I've been asked to oversee reviewing some 3rd party code (Freeware C# Sharepoint webpart in this case) before its inclusion on a internal corporate network. The big concerns are malicious code hidden in the webpart that will steal data/send information back to the webpart creator/etc, with a secondary concern being it will cause perform...

Detect last login date/time in SQL Server 2000

Is there a way of determining when a given user last logged into SQL Server? We are about to carry out an audit of our database server and would like to delete users that are redundant. Incidentally I'm interested in users at the server-level (i.e. Logins), not users of individual databases. Thanks in advance. ...