Re: Audit log that SA cannot modify



Hi
Don't you trust in SA? :-))))))

Remove people that you don't want from sysadmin server role and then you
audit them by using triggers


<jasonshohet@xxxxxxxxx> wrote in message
news:1140012486.489277.187450@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
But the SA can disable the trigger, thats not enough.
I want something that can audit the SA himself - and anyone else. It
should report on all schema changes and all transactions made to the db
- by anyone - and nobody should be able to modify it (including the SA)
except truncate the log by date range at the end of the audit period.



.



Relevant Pages

  • Re: OT: Whats wrong with gmail?
    ... You have already instilled trust in countless thousands. ... "We can audit the source code." ... Most people would be incapable of this feat, ... After all, if the hardware cannot be trusted, all the rest is ...
    (freebsd-questions)
  • Re: Audit logging an adp
    ... Allen Browne's audit code. ... Some people may be tempted to suggest using SQL Server triggers, ... but without an adequate security model your audit trail ...
    (microsoft.public.access.adp.sqlserver)
  • Re: Audit logging an adp
    ... if Access MDB had triggers; I would probably be using it right now lol. ... Allen Browne's audit code. ... Some people may be tempted to suggest using SQL Server triggers, ... but without an adequate security model your audit trail ...
    (microsoft.public.access.adp.sqlserver)
  • Re: Tracking object state for auditing
    ... the puprose of "tracking" would be to ultimately "audit" the changes ... creating triggers and the like is not ... something the "powers that be" will allow. ... > A very very simple way to track changes to data in a database is to ...
    (comp.object)
  • Re: Results of Altering Trigger NOT FOR REPLICATION
    ... audit tables and they are therefore being kept in synch that way. ... altered the triggers so that they are NOT FOR REPLICATION. ... > the trigger to NFR and replicate both tables. ...
    (microsoft.public.sqlserver.replication)