RE: A Question on auditing the Oracle 11i "apps" schema

Hameed,  

We do audit DDL using a system level DDL trigger that covers all schemas (including APPS) and have not seen any performance issues. In Oracle Apps, there are a number of objects on which DDL is performed regularly as part of the program itself (truncates, interim processes, etc.) which you can choose to ignore, and store the rest (ora_sysevent, ora_dict_obj_* and sys_context are your best friends here). When APPS is not covered, you haev lost most of the critical stuff...  

John Kanagaraj <><
DB Soft Inc
Phone: 408-970-7002 (W)  

Co-Author: Oracle Database 10g Insider Solutions http://www.samspublishing.com/title/0672327910  

• The opinions and facts contained in this message are entirely mine and do not reflect those of my employer or customers **

  ---

From: racdba-bounce_at_freelists.org [mailto:racdba-bounce_at_freelists.org] On Behalf Of Hameed, Amir
Sent: Tuesday, September 27, 2005 6:53 AM To: oracle-l_at_freelists.org; racdba_at_freelists.org Subject: A Question on auditing the Oracle 11i "apps" schema

This question is for those folks who are running the Oracle applications e-business suite. We are in the process of getting compliance with SOX regulations. One of the controls that the auditors are asking for is to keep track of changes (DDL) in the instance. So far, we are auditing all the accounts with the exception of "apps" because of the performance reasons. I would be interested to know how are others keeping track of the apps account activities ?

Any help would be appreciated.

Thanks
Amir

--
http://www.freelists.org/webpage/oracle-l