Home-grown applications can use dbms_application_info to pass the true end-user where one Oracle user is used. HTH -- Mark D Powell -- -----Original Message----- From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Freeman, Donald Sent: Monday, May 09, 2005 2:19 PM To: george.rusnak@xxxxxxxx; oracle-l@xxxxxxxxxxxxx Subject: RE: Auditing original user in an n-tier environment I have the same problem. My users are using Cognos and SAS. SAS is in =3D a pilot project and apparently, it can do the pass through you are = =3D describing. Cognos logs user access to a file. Cognos provides a schema =3D you can build and load the log files to it for better management. = Its =3D kind of clunky and doesn't give you row level auditing. Is the App = =3D something built in house or a COTS product? Don Freeman Database Administrator 1 Pennsylvania Dept of Health Bureau of Information Technology 717-783-8095 Ext 337 -----Original Message----- From: oracle-l-bounce@xxxxxxxxxxxxx [mailto:oracle-l-bounce@xxxxxxxxxxxxx]On Behalf Of Rusnak, George A. (SEC-Lee) CTR Sent: Monday, May 09, 2005 1:51 PM To: oracle-l@xxxxxxxxxxxxx Subject: Auditing original user in an n-tier environment GURUS, Oracle EE: 9.2.0.5 Hardware: HP-UX 3 tier architecture: Presentation, Application and Database. Language: Cold Fusion Challenge:=3D20 How do we capture the user logging into the Presentation layer and pass =3D that original user id through the Application layer to the database = =3D layer and be able to capture that original user id in the audit logs. = =3D The Application layer always connects to the database as the SAME user = =3D NOT as the original user. We need to know what code goes in what tier. I have read and searched but cannot find a doc on how to do this. With = =3D all the multi-tier architectures out there I was hoping to find a ton of =3D information on this subject. THANK YOU, Al Rusnak * 804-734-8210 * george.rusnak@xxxxxxxx -- //www.freelists.org/webpage/oracle-l -- //www.freelists.org/webpage/oracle-l -- //www.freelists.org/webpage/oracle-l