You might be able to use LogMiner to tell who ran that command. I'm not sure if that statement is logged in redo, however there are probably at least some related recursive DML statements that are executed on behalf of that statement. You can also check your audit trail if you have auditing turned on, and if you don't, then you might want to read this article: http://blog.contractoracle.com/2009/09/enable-oracle-auditing-before-you-need.html Since you're on 11g, you might be lucky enough to have the default auditing turned on as described here - if not, I'd suggest that you turn it on soon: http://download.oracle.com/docs/cd/B28359_01/server.111/b28337/tdpsg_auditing.htm#TDPSG55221 Regards, Brandon Privileged/Confidential Information may be contained in this message or attachments hereto. Please advise immediately if you or your employer do not consent to Internet email for messages of this kind. Opinions, conclusions and other information in this message that do not relate to the official business of this company shall be understood as neither given nor endorsed by it. -- //www.freelists.org/webpage/oracle-l