On Fri, Aug 26, 2011 at 04:10:03PM -0400, Cliff Perry wrote: > > Do you do it within the schema (and loose the who from where did what - > unless all app code passes it down to DB).
No. You do it once, at the start of the HTTP request handling, store that to the database and use identifier throughout your HTTP request processing. You have the identifier in (say) package variables in Oracle and in temporary table or environment variable in PostgreSQL, and you don't have to change a bit of application code. And if new application Y which "does the same thing like X, except it does some filtering here and there and also touches objects Z" gets created, you don't have to aprinkle new auditing calls into it -- you just log on the data level. -- Jan Pazdziora Principal Software Engineer, Satellite Engineering, Red Hat _______________________________________________ Spacewalk-devel mailing list Spacewalk-devel@redhat.com https://www.redhat.com/mailman/listinfo/spacewalk-devel
