Re: Manual Auditing
Posted in 1992
Topics: Connectivity: ESQL/C, 4GL & Embedded SQL, Security, Permissions & Auditing
------------ We've got a client running OnLine for their application. They want to note every time someone changes a field in their application (i.e. who changed what field on which record and what did they change it from)........ ---------- You can try a simple approach and do your own auditing, by setting up a "Transaction" table. Provided you can use 4GL, or ESQL/C, you can keep your own information in this transaction table every time a record is changed, or even added to the database. The way this works, is you identify the unique fields from tables that users have ability to change, and then each time the program finishes an "INPUT" statement you "Begin work" a transaction. Save the changes, first, then if successful, save the index key of the record that was changed, along with the User ID, the Time, date, and any other details that your Management wants. Finally, commit the Informix transaction, if both your Data table changes, and your Transaction table records are saved successfully. I've done this on several databases, and my clients seem to be happy with the results. However, by using this method, you can quickly grow a HUGE transaction table of thousands of records. So, you will need to adminsiter this closely, in order not to use up all your data space. Set up a daily routine to automatically delete records of a certain age. Hope this Helps! Bob H.