dick, I haven't done this as yet, but why not use an "on-logon trigger" and capture the username, the program, the machine etc from v$session?
Of course, the other thing you could do would be to place an entry in product_user_profile and remove the ability to connect via sql*plus and/or Toad? Rachel --- [EMAIL PROTECTED] wrote: > Folks, > > Before I go off re-inventing the wheel once again I'll ask the > group is > anyone has tried this before. What I have is a request from > damanagement to > tell them when someone connects to our PeopleSoft database using the > schema > username, but outside of PeopleTools. The reason is that there have > been some > "unexplained" changes to data that have occurred over the last month > that is > causing a pile of concern. It is believed that someone who has the > schema > password is using SQL*Plus or Toad to update the data when they > should not be > doing so. Now auditing connects for the schema account is not a > problem, but > determining which are suspicious and which are due to the damned > PeopleSoft > panel processor I can't see a way around easily from sys.aud$. > Anyone else been > there, done that?? > > Dick Goulet > -- > Please see the official ORACLE-L FAQ: http://www.orafaq.com > -- > Author: > INET: [EMAIL PROTECTED] > > Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 > San Diego, California -- Public Internet access / Mailing > Lists > -------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB ORACLE-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). __________________________________________________ Do You Yahoo!? HotJobs - Search Thousands of New Jobs http://www.hotjobs.com -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Rachel Carmichael INET: [EMAIL PROTECTED] Fat City Network Services -- (858) 538-5051 FAX: (858) 538-5051 San Diego, California -- Public Internet access / Mailing Lists -------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
