Application User Auditing in DB

[Jon D.]

Does anyone know how you can pass the application user ID to the database for
auditing purposes? We require auditing at the user level in the DB. The
problem is you loose a significant portion of transaction auditing when you use
connection pooling and multi-tier applications like CF. They are all logged at
the datasource account account level, not the specific application user.
Right now we are on MX6.1 and Oracle 9i
Oracle's JDBC supports keeping track of the "application user" through
CLIENT_IDENTIFIER but I am not sure how to access this through the CF
framework.

Any ideas or alternatives are greatly appreciated!

Thanks!
Jon

[zz3top]

You'll need to solve two issues:

1. Gettin the application user Id
2. Implementing the code for Oracle:

For the Oracle part, see proof of concept demo:
[url]http://searchoracle.techtarget.com/tip/1,289483,sid41_gci910600,00.html[/url]

For the application user id, you probably need to integrate with whatever
security services you might use - Windows or Linux. A quick and dirty answer
could be the CGI.AUTH_USER variable.