Re: Auditing Oracle business processes?

On 8/10/05, Denham Eva <EVAD_at_tfmc.co.za> wrote:
>
> Hello Group
>
> I have had an unusual request (at least it is for me).
> I have been asked if there is some way to audit the Oracle Processes
> within the Database.
> Some thing along the line of, how can I prove that when the user enters
> data into the database that all the relevant triggers kick off and all
> the relevant procedures/packages etc are accessed, also the application
> is operating correctly at db level.

  If you know what the correct triggers and procedures and code are exactly then you could trace a session in a test system (just sql trace would do you don't need timing info for this) and the various executions of database side code (triggers et al) would be recorded - not easily readable mind but hey.  client side code wouldn't get recorded and the obvious question to ask would be how you know what *should* get executed.  

Now my logic says that checking that garbage IN and checking Garbage OUT
> and the correctness of the garbage would be an indication of "correct
> procedural execution"; does not seem to excite Management quite as I had
> hoped.

 Well from an audit point of view it is perfectly valid to take a sample of inputs and see what outputs they produced - i.e treat the system as a black box and verify statistically that its doing the right things.  

Also Management seems to have the impression that databases have an
> internal system of being able to do this??
> Is this so? Beyond the obvious Auditing functions of who did what when
> etc (Tried explaining that, got the glazed look).
>
> Does anyone have (Know of) some other method?
>
> TIA
> Best Regards
> Denham
> --
> http://www.freelists.org/webpage/oracle-l
>

-- 
Niall Litchfield
Oracle DBA
http://www.niall.litchfield.dial.pipex.com

--
http://www.freelists.org/webpage/oracle-l