SQL Auditing with Single-Sign On Web App? Possible? Best Practices?
From: Erik Mlincek (erikm_at_lcgtech.com)
Date: 04/07/04
- Next message: John Hendrikx: "Re: Simple query on huge table uses Index Scan instead of Seek"
- Previous message: Dan Guzman: "Re: Simple query on huge table uses Index Scan instead of Seek"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 7 Apr 2004 10:11:41 -0400
All,
I'm tasked with determining and ultimately implementing the best solution
for generating an audit trail of ALL user activity within a database that is
used for awarding monies. The audit trail must be "fine-grained", in that
it must record some way to tie back to the user, the table, key and row that
was touched and what was done, as well as "old" and "new" values on an
update.
The web app has been developed already and uses a single-sign on between
IIS/.NET and SQL Server. Experience-wise, I am not a web developer, I am a
traditional VB 6.0 and SQL developer who has not "upgraded" to .NET yet -
and I have decent Transact-SQL and SQL Server experience. The web
developers are telling me that it is a best practice to use ONE ID to access
the SQL data between IIS/.NET and SQL Server. Is this True?
I've read everything about the trigger generators and log viewers from
products from ApexSQL, Lumigent, et al, as well as the tech articles about
using triggers to generate the data myself. I know about traces and
profiles from the Profiler but I'm not sure how to implement them or if they
will meet my need. I am leaning towards implementing this myself using
triggers and functions, and developing a VB 6.0 app that uses SQL-DMO to
"apply" the code to any database I specify. I'd like to do it this way for
reusability.
However, my question is this:
How can I get the "fine-grained" auditing that is needed by my requirement
with just a single-user signon? I want to implement this at the
database/server level, and not at the "data services" class level within the
app. Any ideas? Am I reaching for the impossible? Anybody know of a way
to "call" IIS to get user session data / cookies from within a stored
proc??? ;-)
I found this on Oracle's site - do we have anything like this in SQL Server
land?
http://otn.oracle.com/pub/articles/nanda_fga_pt2.html
-- Sincerely, Erik Mlincek erikm@lcgtech.com
- Next message: John Hendrikx: "Re: Simple query on huge table uses Index Scan instead of Seek"
- Previous message: Dan Guzman: "Re: Simple query on huge table uses Index Scan instead of Seek"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
