Oracle-L: RE: recording SQLPlus activity

From: Craig Munday <Craig.Munday_at_ecard.com.au>
Date: Tue, 25 Jun 2002 23:03:18 -0800
Message-ID: <F001.00488024.20020625230318@fatcity.com>

Ray,

I'll explain how I have tended to work with both C++/Java/PLSQL development groups of 10-50 people.

every developer has their own schema in which they can do whatever they want. Typically each has their own build environment as well and a complete version of the application's schema (which they have checked out of source code control).
The development group has their own integration schema. This schema is typically owned by the person responsible for integrating the various components that each developer is working on, or by some senior member of the group. The software (and schema) released to this area is typically the product of a nightly build. That is, developers unit tested and checked in their code.
The testing group has their own schema and formal build of the software that is to be tested. Developers typically have very little access (or no access) to this environment.

In terms of examining the SQL that the developers are generating, I am only interested the SQL that is being generated by applications that have been built from code checked into source code control.

That is, I will typically trace the SQL from either the test environment or the development group's integration environment. I do not see it necessary to check every piece of SQL that developers are currently working on. Once the code is checked in however I see that the developer considers this code to be somewhat finalised.

In terms of backing up the development database, I find that a nightly export and complete cold backups work best - you can recover a single user from the previous nights export. Generally the previous night is ok because the changes that developers make should be scripted and checked into source code control - hence they should be able to rebuild what they have done with little trouble.

Hope this helps.

Cheers,
Craig.

-----Original Message-----
Sent: Wednesday, 26 June 2002 4:24 AM
To: Multiple recipients of list ORACLE-L

Craig,
This relates to SQLPLUS. A majority of our developers use sqlplus.

There are 2 choices:
(a) separate environments for each developer using GRANTS, etc. (b) one single application owner account, where all the developers work.

Now, (b) is several hundred times more efficient, and I am looking for input

on how to make (b) work for me, not (a).

What I would like, ideally speaking:
1. Users log into SQLPlus into the same account. They get tagged. All actions are recorded, especially DDL. Who, When, What SQL, 2. No direct SQLPlus access, i.e. not without being tagged. 3. Restrictions: Only specific users (identified by tags) are to be allowed alter/drop table, etc.

Thus, everyone works in the same area, but I'm watching and controlling.

PUPBLD does not cut it since its not at the object level
Redo logs: One problem is that if everyone is working in the same user, we cant tell "who".
Audit: what audit can I turn on?

thanks.

Ray

>From : "Craig Munday" <Craig.Munday_at_ecard.com.au>
Reply-To : ORACLE-L_at_fatcity.com
To : Multiple recipients of list ORACLE-L <ORACLE-L_at_fatcity.com> Subject : RE: recording SQLPlus activity Date : Mon, 24 Jun 2002 18:08:20 -0800

Ray,

Why would you want to record every SQL statement that your developers issue?

Are they just using SQL*Plus or some other language?

Cheers,
Craig.

-----Original Message-----
Sent: Tuesday, 25 June 2002 10:53 AM
To: Multiple recipients of list ORACLE-L

I have just been moved to a group with several hundred developers, and to say the least the environment is chaotic.

Without putting limits on my developers (such as via READONLY user, etc.), is there some way that every command that a developer executes using SQLPlus gets recorded (by userid and time)?

Ray

Send and receive Hotmail on your mobile device: http://mobile.msn.com

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Ray Gordon
  INET: rgordon_1_at_hotmail.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).




-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Craig Munday
  INET: Craig.Munday_at_ecard.com.au

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Received on Wed Jun 26 2002 - 02:03:18 CDT