Results 1 to 3 of 3
  1. #1
    Join Date
    Feb 2004
    Location
    Germany
    Posts
    15

    Unanswered: auditing DBAs activities

    Hi,

    is there any possibility to audit db admin activities for a DB2 7.2 fixpack 6? i mean such table actions like insert, update, delete as well as select. i cannot use the db2 audit tool, since this tool by definition not report those actions for users with such authorization. I though about trigger, unfortunately trigger not cover select actions.

    i'd be very gratefull for any help

    wbr

  2. #2
    Join Date
    Apr 2003
    Posts
    191

    Re: auditing DBAs activities

    Hi,

    this is a tough one. You have got two options, none particularly appealing:

    1) A statement event monitor
    2) Hide away the tables and access them through user defined functions only (for select). The udfs would need to keep track of their actions. You will probably need application support for this, because you cannot reliably ask DB2 sql for user ids, even CURRENT USER won't work for this.

    Johann

    Originally posted by kirna
    Hi,

    is there any possibility to audit db admin activities for a DB2 7.2 fixpack 6? i mean such table actions like insert, update, delete as well as select. i cannot use the db2 audit tool, since this tool by definition not report those actions for users with such authorization. I though about trigger, unfortunately trigger not cover select actions.

    i'd be very gratefull for any help

    wbr

  3. #3
    Join Date
    Feb 2004
    Location
    Germany
    Posts
    15

    Re: auditing DBAs activities

    Hi Johann,

    thanks for the suggestion.

    kirna

    Originally posted by jsander
    Hi,

    this is a tough one. You have got two options, none particularly appealing:

    1) A statement event monitor
    2) Hide away the tables and access them through user defined functions only (for select). The udfs would need to keep track of their actions. You will probably need application support for this, because you cannot reliably ask DB2 sql for user ids, even CURRENT USER won't work for this.

    Johann

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •