RE: Auditing original user in an n-tier environment

  • From: "Powell, Mark D" <mark.powell@xxxxxxx>
  • To: <oracle-l@xxxxxxxxxxxxx>
  • Date: Mon, 9 May 2005 14:30:45 -0400

Home-grown applications can use dbms_application_info to pass the true
end-user where one Oracle user is used.

HTH -- Mark D Powell --


-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx] On Behalf Of Freeman, Donald
Sent: Monday, May 09, 2005 2:19 PM
To: george.rusnak@xxxxxxxx; oracle-l@xxxxxxxxxxxxx
Subject: RE: Auditing original user in an n-tier environment

I have the same problem.  My users are using Cognos and SAS.  SAS is in
=3D a pilot project and apparently, it can do the pass through you are =
=3D
describing.  Cognos logs user access to a file. Cognos provides a schema
=3D you can build and load the log files to it for better management. =
Its
=3D kind of clunky and doesn't give you row level auditing. Is the App =
=3D
something built in house or a COTS product?

Don Freeman
Database Administrator 1
Pennsylvania Dept of Health
Bureau of Information Technology
717-783-8095 Ext 337


-----Original Message-----
From: oracle-l-bounce@xxxxxxxxxxxxx
[mailto:oracle-l-bounce@xxxxxxxxxxxxx]On Behalf Of Rusnak, George A.
(SEC-Lee) CTR
Sent: Monday, May 09, 2005 1:51 PM
To: oracle-l@xxxxxxxxxxxxx
Subject: Auditing original user in an n-tier environment


GURUS,
Oracle EE: 9.2.0.5
Hardware: HP-UX

3 tier architecture: Presentation, Application and Database.
Language: Cold Fusion

Challenge:=3D20
How do we capture the user logging into the Presentation layer and pass
=3D that original user id through the Application layer to the database =
=3D
layer and be able to capture that original user id in the audit logs. =
=3D
The Application layer always connects to the database as the SAME user =
=3D
NOT as the original user.  We need to know what code goes in what tier.
I have read and searched but cannot find a doc on how to do this. With =
=3D
all the multi-tier architectures out there I was hoping to find a ton of
=3D information on this subject.

THANK YOU,

Al Rusnak
* 804-734-8210
* george.rusnak@xxxxxxxx



--
//www.freelists.org/webpage/oracle-l
--
//www.freelists.org/webpage/oracle-l
--
//www.freelists.org/webpage/oracle-l

Other related posts: