How to implement Audit/Alert for Row level access?

#1

Hello,

We have a large database of our customers. Some of the important
customers records are flagged and can be accessed only by applications
designed for upper management. The management would like to know if
anyone else is trying or successfully accessed the flagged customers.

Is there anyway to send an email alert when a normal user/sysadmin tries
to access the flagged customers in the table?

Thank you in advance for any help.

NJ

#2

Ok. Well, actually anyone user can access the data in the table. We
would like to monitor the access to the flagged customers.

NJ

Tom van Stiphout wrote:

Quote:

On Mon, 05 May 2008 21:09:00 -0400, Neil Jones
castellan2004-atnews (AT) yahoo (DOT) com> wrote:

You may have a logic error in your question, because if your assertion
"can be accessed only by applications designed for upper management"
is true, then obviously no one else has successfully accessed the
flagged customers.

-Tom.

Hello,

We have a large database of our customers. Some of the important
customers records are flagged and can be accessed only by applications
designed for upper management. The management would like to know if
anyone else is trying or successfully accessed the flagged customers.

Is there anyway to send an email alert when a normal user/sysadmin tries
to access the flagged customers in the table?

Thank you in advance for any help.

NJ

#3

Ok. Well, actually anyone user can access the data in the table. We
would like to monitor the access to the flagged customers.

NJ

Tom van Stiphout wrote:

Quote:

On Mon, 05 May 2008 21:09:00 -0400, Neil Jones
castellan2004-atnews (AT) yahoo (DOT) com> wrote:

You may have a logic error in your question, because if your assertion
"can be accessed only by applications designed for upper management"
is true, then obviously no one else has successfully accessed the
flagged customers.

-Tom.

Hello,

We have a large database of our customers. Some of the important
customers records are flagged and can be accessed only by applications
designed for upper management. The management would like to know if
anyone else is trying or successfully accessed the flagged customers.

Is there anyway to send an email alert when a normal user/sysadmin tries
to access the flagged customers in the table?

Thank you in advance for any help.

NJ

#4

Ok. Well, actually anyone user can access the data in the table. We
would like to monitor the access to the flagged customers.

NJ

Tom van Stiphout wrote:

Quote:

On Mon, 05 May 2008 21:09:00 -0400, Neil Jones
castellan2004-atnews (AT) yahoo (DOT) com> wrote:

You may have a logic error in your question, because if your assertion
"can be accessed only by applications designed for upper management"
is true, then obviously no one else has successfully accessed the
flagged customers.

-Tom.

Hello,

We have a large database of our customers. Some of the important
customers records are flagged and can be accessed only by applications
designed for upper management. The management would like to know if
anyone else is trying or successfully accessed the flagged customers.

Is there anyway to send an email alert when a normal user/sysadmin tries
to access the flagged customers in the table?

Thank you in advance for any help.

NJ

#5

Quote:

The management would like to know if anyone else is trying or successfully accessed the flagged customers.

This is a HIPAA requirement and it is best done with third party
software that has been certified. Conventional tools based off the
log files will show changes, but not access by user.

#6

Quote:

The management would like to know if anyone else is trying or successfully accessed the flagged customers.

This is a HIPAA requirement and it is best done with third party
software that has been certified. Conventional tools based off the
log files will show changes, but not access by user.

#7

Quote:

The management would like to know if anyone else is trying or successfully accessed the flagged customers.

This is a HIPAA requirement and it is best done with third party
software that has been certified. Conventional tools based off the
log files will show changes, but not access by user.

#8

On May 6, 5:54 pm, --CELKO-- <jcelko... (AT) earthlink (DOT) net> wrote:

Quote:

The management would like to know if anyone else is trying or successfully accessed the flagged customers.

This is a HIPAA requirement and it is best done with third party
software that has been certified. Conventional tools based off the
log files will show changes, but not access by user.

Joe, you don't happen to have a list of such software?

/Lennart

#9

On May 6, 5:54 pm, --CELKO-- <jcelko... (AT) earthlink (DOT) net> wrote:

Quote:

The management would like to know if anyone else is trying or successfully accessed the flagged customers.

This is a HIPAA requirement and it is best done with third party
software that has been certified. Conventional tools based off the
log files will show changes, but not access by user.

Joe, you don't happen to have a list of such software?

/Lennart

#10

On May 6, 5:54 pm, --CELKO-- <jcelko... (AT) earthlink (DOT) net> wrote:

Quote:

The management would like to know if anyone else is trying or successfully accessed the flagged customers.

This is a HIPAA requirement and it is best done with third party
software that has been certified. Conventional tools based off the
log files will show changes, but not access by user.

Joe, you don't happen to have a list of such software?

/Lennart