On Mon, 2007-03-26 at 21:49 -0600, David E. Jones wrote:
> On Mar 26, 2007, at 9:26 PM, Christopher Snow wrote:
> 
> > Does anyone using ofbiz keep audit trails?
> 
> Audit trails of what? Keep in mind the requirements vary from data  
> element to data element... so which of the hundreds of top level data  
> structures (or more detail if you'd like) do you have in mind?
> 
The requirements for audit trails are specific to each business  (except
financial transactions where audit trail requirements are stipulated by
law, accounting stds, etc).

CA Clarity allows the system administrator to configure audit trails to
meet the business requirements by allowing the admin to simply choose
which entity attributes should be logged.  The application takes care of
the logging and provides screens to view the audit log.

My specific need is to to implement some form of audit trail in a risk
management application I'm developing.  What I was hoping for is some
kind of ofbiz pattern to point me in the right direction.  

> > Is ofbiz used in SOX environments?
> 
> Good question... I know there are various publicly traded companies  
> that use OFBiz, but I don't think any of them are using it for  
> accounting and such. Still for the accounting and general framework  
> level stuff in OFBiz, I would suspect that it should comply quite  
> well with Sarbanes Oxley. Of course, those laws may be repealed and/ 
> or replaced by the time a real review is done by a publicly traded  
> company that needs to AND all changes required go back into OFBiz...
> 
> Are you saying that you are doing an accounting, inventory  
> management, etc implementation of OFBiz for a publicly traded company  
> and need to do a SOX audit? If so I'd guess you have a fair budget  
> for it, so I can't wait to see more!

The reason for mentioning SOX is because it is the main driver of
customer requirements for audit trails when configuring CA Clarity for
the customer.

> 
> > Is this the only way?:
> 
> The only way to... ?

Is the process below (email from Anil to you) the recommended way for
implementing audit trails?

> 
> -David
> 
> 
> >> Anil,
> >>
> >> You could do this there, that should work fine. I wouldn't use a  
> >> toString()
> >> and equals() for comparison, I would just use the equals() method  
> >> on the
> >> classes. For general knowledge you should check out the Comparable  
> >> interface
> >> which is used for finding out =, !=, >, >=, <, <=, etc.
> >>
> >> Later,
> >> -David Jones
> >>
> >> -----Original Message-----
> >> From: Anil K Patel [mailto:toanilpatel at hotmail.com]
> >> Sent: Thursday, October 10, 2002 1:13 AM
> >> To: jonesde at ofbiz.org
> >> Cc: ofbiz-entity-dev at lists.sourceforge.net
> >> Subject: Re: [OFBiz-Entity-Dev] Keep Audit trail of Change of Data in
> >> Tables
> >>
> >>
> >> David,
> >> What if I modify the "set(String name, Object value, boolean  
> >> setIfNull)"
> >> in GenericEntity class such that It compares the new value to the  
> >> Old value,
> >> changes the fieds map only if required. If at all you think this  
> >> is OK to
> >> do, Then I need  help in Logic to compare the values of field.
> >> Will calling ToString on values and then comparing be OK?
> >> Regards
> >> Anil
> >>
> >>
> >>
> >>
> >> ---- Original Message -----
> >> From: "David E. Jones" <jonesde at ofbiz.org>
> >> To: "Anil K Patel" <anilpatel72 at netscape.net>;
> >> <ofbiz-entity-dev at lists.sourceforge.net>
> >> Sent: Wednesday, October 09, 2002 11:35 PM
> >> Subject: RE: [OFBiz-Entity-Dev] Keep Audit trail of Change of Data  
> >> in Tables
> >>
> >>
> >>>
> >>> Anil,
> >>>
> >>> There is nothing in the Entity Engine to do this automatically,  
> >>> but I
> >>> suppose it could be done. You mean you want to log EVERY change  
> >>> of EVERY
> >>> field? That could be a lot of data. There are many variations on  
> >>> this that
> >>> have varying impacts, it really depends on how little you can get  
> >>> away
> >> with.
> >>>
> >>> If you get the most recent stuff from CVS there is an original  
> >>> values map
> >>> that is needed for full auto cache clearing and can be useful for  
> >>> this
> >> type
> >>> of application as well.
> >>>
> >>> Later,
> >>> -David Jones
> >>>
> >>>
> >>>
> >>>
> >>> -----Original Message-----
> >>> From: ofbiz-entity-dev-admin at lists.sourceforge.net
> >>> [mailto:ofbiz-entity-dev-admin at lists.sourceforge.net]On Behalf  
> >>> Of Anil K
> >>> Patel
> >>> Sent: Thursday, October 10, 2002 12:03 AM
> >>> To: ofbiz-entity-dev at lists.sourceforge.net
> >>> Cc: jonesde at ofbiz.org
> >>> Subject: [OFBiz-Entity-Dev] Keep Audit trail of Change of Data in  
> >>> Tables
> >>>
> >>>
> >>> I am using Entity Engine.
> >>> Major Issue
> >>> I have a requirement to keep Audit of Change of Data in Tables 
> >>> (columns).
> >> If
> >>> somebody has experiance doing something similar or has Idea on  
> >>> how we can
> >> do
> >>> it.
> >>>
> >>> Sub Issue
> >>> On an existing Entity If I run findByPrimeryKey and get the  
> >>> GenericValue
> >>> object, now If I set a propertyname/value map or Loop through all  
> >>> the
> >>> attributes and set value for each property in a GenericValue  
> >>> Object. Is
> >>> there a way for me to know if the new value set for a property was
> >> different
> >>> then Old value for the property.
> >>>
> >>> Regards
> >>> Anil K Patel
> >
> > On Mon, 2007-03-26 at 16:09 +0100, Christopher Snow wrote:
> >> Is there a preferred way of setting up an audit trail of changes to
> >> entity data in ofbiz?
> >>
> >> Thanks in advance ...
> >>
> >>
> >
> 

Reply via email to