RE: Auditing original user in an n-tier environment

From: Vlado Barun <vlado_at_cadre5.com>
Date: Mon, 9 May 2005 14:38:39 -0400
Message-Id: <200505091838.j49IcfL20752@cadre5.com>

Option 1: Use oracle n-tier proxy authentication, see http://download-west.oracle.com/docs/cd/B10501_01/network.920/a96582/authuse r.htm#1006671

Option 2: Use session context variables to identify the user that is using the current connection. This assumes that the presentation layer knows the identity of the user. If so, you can use the sys_context function to add an attribute to the session identifying the "real" user. This attribute can then be used in any function/procedure/package/trigger/sql to populate the appropriate fields in the audit logs...
See
http://asktom.oracle.com/pls/ask/f?p=4950:8:::::F4950_P8_DISPLAYID:616200296 2892 for more details...

Vlado Barun, M.Sc.
Senior Data Architect, Cadre5
www.cadre5.com

Office: 865 690 4442
Mobile: 865 335 7652
e-mail: vlado_at_cadre5.com

AIM: vbarun2
-----Original Message-----
From: oracle-l-bounce_at_freelists.org [mailto:oracle-l-bounce_at_freelists.org] On Behalf Of Rusnak, George A. (SEC-Lee) CTR Sent: Monday, May 09, 2005 1:51 PM
To: oracle-l_at_freelists.org
Subject: Auditing original user in an n-tier environment

GURUS,
Oracle EE: 9.2.0.5
Hardware: HP-UX

3 tier architecture: Presentation, Application and Database. Language: Cold Fusion

Challenge:
How do we capture the user logging into the Presentation layer and pass that original user id through the Application layer to the database layer and be able to capture that original user id in the audit logs. The Application layer always connects to the database as the SAME user NOT as the original user. We need to know what code goes in what tier. I have read and searched but cannot find a doc on how to do this. With all the multi-tier architectures out there I was hoping to find a ton of information on this subject.

THANK YOU, Al Rusnak
* 804-734-8210

george.rusnak_at_deca.mil

--
http://www.freelists.org/webpage/oracle-l



--
http://www.freelists.org/webpage/oracle-l

Received on Mon May 09 2005 - 14:43:12 CDT