I am using LLBL Gen Pro v2.6 and am attempting to create a means of auditing changes made to the database. Now, I know that LLBL Gen has auditing built into it using AuditorBase and dependency injection. The question I have is; I need to track not only the stuff that LLBL Gen exposes as auditable, but also the User who made the changes. ...
In many past projects, I used this JPA / Hibernate approach to add auditing capabilities to a system. It's very effective and unobtrusive. Is there a Grails @MappedSuperclass alternative (short of coding domain model objects in Java instead of Groovy)? How can one declare a parent class in a table-per-subclass approach without having a ...
Is there a built in way in SQL Server 2005 to audit things specifically like deleting a stored procedure? Is there a history table that I can query? We have a mystery sproc that has disappeared a few times now. ...
Hello. I have a problem with a Database at my work. There is currently auditing in place, but its clunky, requires a lot of maintence, and it falls short in a few regards. So I am replacing it. I want to do this in as generic of a way as possible and have designed the tables, and how everything will link and be updated. Now, thats all ...
There is some auditing in my application. Every audit event has it's own log4j category with name that is prefixed by same string. EG: general auditing category name: com.company.audit web login category name: com.company.audit.web.login create something: com.company.audit.api.create etc.. some of the categories should be logged by de...
And if not, is there a way to tell when a trigger was disabled/enabled? FOLLOWUP: It's a rather interesting diagnostic case. I was only involved from the periphery, and the guy doing the diagnostics isn't a database guy. Anyways, he had a trigger that would move data from one table to another. He did a comparison and not all the data ...
This may seem like a dumb question, but I'm in a head-> wall situation right now. I work on a massive ERP application in which the SQL Server 2005 database is updated by multiple disparate applications. I'm trying to figure out where the deletes in a particular table are originating from. I tried using the Profiler but I'm not able to...
This was always a problem for me, as rails doesn't have some mechanisms for session tracking like java frameworks do, what methods do you use to track who is currently logged on your site? I use a simple method by setting up last_visited field with current time every time user clicks somewhere on the site, and then checking for users whi...
Background: I have a web application for which I need to do database auditing for insert/deletes/updates (and maybe reads). I use LINQ as my ORM. Using some ideas I found on the web I've come up with a way of using attributes to decorate my entities which have associated audit tables. The audit table itself is required to include th...
I would need to implement an audit log for a web application written with JBoss Seam. EntityListeners seem like good candidates, but I don't know how to connect the EntityListeners to the application session context to include the logged in used principal in the audit record. I wonder if there is a way to do this "connection", or if the...
I am trying to implement Optimistic Locking in an asp.net MVC application, as well as provide audit trailing. The audit framework relies on being able to call DataContext.GetModifiedMembers during SubmitChanges, which makes good sense, i guess. The optimistic locking uses ROWVERSION timestamps, serialized to base64 and put in a hidden ...
I asked a question on SOF a week or so ago about auditing SQL data changes. The usual stuff about using triggers came up, there was also the mention of CDC in SQL Server 2008. I've been trying it out today and so far so good, the one thing I can't see it supports is keeping a track of who actually made the change. Who executed the stat...
I already audit authorization success, failure and logout. I've considered auditing (logging) every method call and keeping a version of every row and column that was ever modified, but both of those options will greatly increase the complexity of auditing. Auditing a random subset sees too random. The legal specs (FISMA, C&A) just sa...
I am using a trigger in PostgreSQL 8.2 to audit changes to a table: CREATE OR REPLACE FUNCTION update_issue_history() RETURNS trigger as $trig$ BEGIN INSERT INTO issue_history (username, issueid) VALUES ('fixed-username', OLD.issueid); RETURN NULL; END; $trig$ LANGUAGE plpgsql; CREATE TRIGGER update_issue...
I'm using the IPostUpdateEventListener interface to do update audit logging now, grabbing the old and new values, then storing each updated field in an "Audit" table and all that jive. Works swell, but there's two last requirements I'm having a hard time fullfilling: Display which employee the update was for. Display the "friendly" nam...
Hi, I am building an application that perform checks on users on specific days. I need to keep track of how many times these checks are performed against that particular user. My initial thought was to just basically have a field in one of my tables which I just increment when the checks have been performed. My other thought was to cre...
I am looking for a good way to track down every change that is made on an object. We are building a custom framework and we need to have a history (kind of) about who changed which object when and maybe also what. What is a good practice in this case? Extend the save / update methods to write a "log"? Should I try with log4net or kin...
Guys, The topic of how to audit tables has recently sprung up in our discussions... so I like your opinion on whats the best way to approach this. We have a mix of both the approaches (which is not good) in our database, as each previous DBA did what he/she believed was the right way. So we need to change them to follow any one model. ...
In my application, I've got a few different types of entities that I have a requirement to do field-level change tracking on. I've googled for this and only can come up with examples on doing simple "Date Inserted" and "Date Updated" audit tracking where you just modify fields on the entity being persisted already. My requirements are mo...
Consider this T-SQL: CREATE USER my_test_user WITHOUT LOGIN; SELECT USER_NAME(), USER, SUSER_SNAME(),SYSTEM_USER, suser_name(); EXECUTE AS USER = 'my_test_user' WITH NO REVERT; SELECT USER_NAME(), USER, SUSER_SNAME(),SYSTEM_USER, suser_name(); I'm looking at using these accounts WITHOUT LOGIN for auditing purposes. Basically, my "get...